CancelDll
LoadDll
Behavioral task
behavioral1
Sample
281e68b84bd63930d6c4de7f2a406f1c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
281e68b84bd63930d6c4de7f2a406f1c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
281e68b84bd63930d6c4de7f2a406f1c_JaffaCakes118
Size
96KB
MD5
281e68b84bd63930d6c4de7f2a406f1c
SHA1
e64b9f93f7cb89911260dae76ad80c915e588795
SHA256
541508503875a9aa694ed1a45045a545113f46163ba22ca70e45116cff2fac58
SHA512
2bf6ca712855300c646791468e4400ba58136f1c6dc6c6fead645de81b757c62c9cd76aa9e3de854678aee75427b6047bc72845fe788723989faebeb1f9fcd76
SSDEEP
1536:Gtbad8oQmjBhVNiHseMxkZS8/F3aaRutY3YdL9YW0oliVd:maSMBhVNgMISe6YIdLSWob
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
281e68b84bd63930d6c4de7f2a406f1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE