CancelDll
LoadDll
Behavioral task
behavioral1
Sample
27ba73cafdb2c7737e5ded5859231281_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27ba73cafdb2c7737e5ded5859231281_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27ba73cafdb2c7737e5ded5859231281_JaffaCakes118
Size
85KB
MD5
27ba73cafdb2c7737e5ded5859231281
SHA1
198e5016f695561ebdf2f53ab7e34ff703a59e6b
SHA256
0e539403e84247c9966dccf26120dc7542b74a77b6f8c8f98e71a6468cc3ba2f
SHA512
777d3c9a7ccf372908b7265cead69e17394c3c957aca18087251511dbbb232aed4ed7f33572ac144d9028dd43af9b66085e711a7978efaa3f24347247e37f53d
SSDEEP
1536:i64W3b/+sHTUxLu5D8izPqQ6EHGkIuFnU:1b/+sHhD3bqQpxIudU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27ba73cafdb2c7737e5ded5859231281_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE