CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2900c3e22ccde1f5a88d6ecb4f110af9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2900c3e22ccde1f5a88d6ecb4f110af9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2900c3e22ccde1f5a88d6ecb4f110af9_JaffaCakes118
Size
6.4MB
MD5
2900c3e22ccde1f5a88d6ecb4f110af9
SHA1
937431c0c92c8d8583404000fda851653300e626
SHA256
b0c7e07564b8289c62de99045b23da279943eec95ca096022ef3d0d41df1a9a7
SHA512
e56ce581badd9fa8d0f6f39b78a17495278c6d3c43e46416900bf5c59af05d9a4c8cfc6523584db4a316713472b283f3eea8426ef34d6eff3578f7c068bb10f2
SSDEEP
3072:J1a1tZ6s262WvIhXhIMV1ukJ8O8GK6c35FkY+W:J0v262WIJhII1uwxKnH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2900c3e22ccde1f5a88d6ecb4f110af9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE