CancelDll
LoadDll
Behavioral task
behavioral1
Sample
27a1be28104271f30c80091fe9eb5fe5_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
27a1be28104271f30c80091fe9eb5fe5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27a1be28104271f30c80091fe9eb5fe5_JaffaCakes118
Size
87KB
MD5
27a1be28104271f30c80091fe9eb5fe5
SHA1
c6a01bcfa02d6c857246ccfba4662dfa043c405f
SHA256
1f36808dfb92d63e156f546bf143b5ab3bcf395a2567bd9e1d8eedd0bae97d7e
SHA512
226d62c7bbdd756ac30aa7f22777a1280e1ec7f922238b85eacad3e2292f0ae673f3d3f00308207144c58ad55853bb7ba32cae8c13058e5036741cec2c0d25a6
SSDEEP
1536:AnSIWWZU3mEo/xMpNhiQTYKSYrxpwx0wslRGhH:ZF3mEeMpNhimfHxWVYGhH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27a1be28104271f30c80091fe9eb5fe5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE