CancelDll
LoadDll
Behavioral task
behavioral1
Sample
261d810a2c5869844841ebb10fe88711_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
261d810a2c5869844841ebb10fe88711_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
261d810a2c5869844841ebb10fe88711_JaffaCakes118
Size
90KB
MD5
261d810a2c5869844841ebb10fe88711
SHA1
e8c753163a91ca61e54b771460900a3f6a74cdfc
SHA256
e0b105d59c53e68a685b64eaa6350a919d86ee4c88c0fe6364152c29556536b6
SHA512
5e24a5778dee58abb22d04b190f9d68f67879567721dbc43ebd39e2f73e06ed189aaad0457c1b212c8b31f367f3ef3524ff83444b4a5d7a00a9f0698528981bb
SSDEEP
1536:SM9jsxvhBfnVB+TGmiQK92BzwScBj1Oml5niLfx3lh:3jsxv6YXHSclZiLfxr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
261d810a2c5869844841ebb10fe88711_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE