CancelDll
LoadDll
Behavioral task
behavioral1
Sample
274f8f8b16a589ef7081665579a79bfb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
274f8f8b16a589ef7081665579a79bfb_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
274f8f8b16a589ef7081665579a79bfb_JaffaCakes118
Size
97KB
MD5
274f8f8b16a589ef7081665579a79bfb
SHA1
994613e87e9b41688832b37b9d053c39269e2d6e
SHA256
b6a81c3dd0dabc1083212da4db29127c67a5924e611dd0400a4c5c8d850aa986
SHA512
db8b12e5ca7f2543c1f93f8d68392998f6b8a2e727f7ef9ddbbbbb0c414b6279f43c7d9df34d818abc00f27092f1414fae799862139540b84a4efe55fb97c706
SSDEEP
3072:YJOqgjs/L37JS8mQpWa/d7CIpTxHD6tz4s:YJOqLjl9mOWgCIvj6V4s
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
274f8f8b16a589ef7081665579a79bfb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE