CancelDll
LoadDll
Behavioral task
behavioral1
Sample
262eaefb50c1edde14216d78edcdca32_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
262eaefb50c1edde14216d78edcdca32_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
262eaefb50c1edde14216d78edcdca32_JaffaCakes118
Size
85KB
MD5
262eaefb50c1edde14216d78edcdca32
SHA1
779c8fd3010e595672b98aa8025b3ef3477ddcb0
SHA256
023c90732f6174ba520b438c9e53e07ca4de6168606936f5356f57d719521736
SHA512
55eff6bd992591f47e20eb8cad310701160895c47b7743f6acf213c8725d58a6c1e67786b772c152d4047f6d7904dc7e466b217ccd86e59679e369d05fcf3b4e
SSDEEP
1536:/xLK2OReR3CHmstaxpmJIdiqGIkFCabo+QWas:ZVOReRyHmswx0JEGIkxbAs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
262eaefb50c1edde14216d78edcdca32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE