CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2a69f7764b7b85e0c0d9f3c22f870cb7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a69f7764b7b85e0c0d9f3c22f870cb7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a69f7764b7b85e0c0d9f3c22f870cb7_JaffaCakes118
Size
110KB
MD5
2a69f7764b7b85e0c0d9f3c22f870cb7
SHA1
eb888f2c9d33c5088dc5da57c5ea6ead58c436dd
SHA256
3afa366a8f139ac04741688956f6534be88537b03f62740bb91274a93a52f056
SHA512
49ae92e5032a8f2aaf45bf010640668c21054d952a139ae41ec593d3657c9c81fdc40fc8fe53725acf926e6697a08c56091208b07734f397ee3a037ae9842a6d
SSDEEP
1536:JVGqeHHrjdj9qcFpzUgnHCTDEIL7tURwwLXEFp3fG6nmSmE:JKLjdjAcoAIL0ZLXqp3fXZz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a69f7764b7b85e0c0d9f3c22f870cb7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE