CancelDll
LoadDll
Behavioral task
behavioral1
Sample
28ca078a12d81abdcbcfec1709cfe5cd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28ca078a12d81abdcbcfec1709cfe5cd_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28ca078a12d81abdcbcfec1709cfe5cd_JaffaCakes118
Size
93KB
MD5
28ca078a12d81abdcbcfec1709cfe5cd
SHA1
e532210f0d7f1208280b8dde60eeb228cf8457bf
SHA256
c7e08fdc75dcd403918629a9bd8fba80a69aa462f0063e870d891da6674e8d4a
SHA512
c3a65c5383ed5871425616e6e23f32a63fdbec7c9a67bf55e1cf469f19a2c93adb82e4aaf7fae406b4abde70f35ef90c8c2b657ae69e95a6f83787c74f3e05b7
SSDEEP
1536:LmSQNbJE1vj8gDxkOhQsRYCcypQeajzpU75/S49Coq3n:LmFty1L8gDyOUCc2ES5/Sxbn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28ca078a12d81abdcbcfec1709cfe5cd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE