CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2de039e10668924fedc63a1bb47b8193_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2de039e10668924fedc63a1bb47b8193_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2de039e10668924fedc63a1bb47b8193_JaffaCakes118
Size
89KB
MD5
2de039e10668924fedc63a1bb47b8193
SHA1
9a5439cc607b2c6a7a97b75eac5dae5159bbc6a8
SHA256
02a6dcce7df2e59cc1dbeb4f93a73e6e0e081ebd1b4ba23e6363c53c2f0df81b
SHA512
022f6525840eb389f5f68966e2050410d4d2025a797711429b70a97b441b8723b53ec43e14e1e7bf09c058574ef5bc08e292f5bc59f1d77025c06d070ea9ad01
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCKUAUVi7gKprWm9vp7lWp9cc5UHJT:Ud5W8kw/jdt9YDJyCKjUVi7BrW0vphX1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2de039e10668924fedc63a1bb47b8193_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE