CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2a51c86548d8c24e5c3c4f2521aa831a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a51c86548d8c24e5c3c4f2521aa831a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a51c86548d8c24e5c3c4f2521aa831a_JaffaCakes118
Size
100KB
MD5
2a51c86548d8c24e5c3c4f2521aa831a
SHA1
a35128e9f42791bf0852d932872cd26fead152ad
SHA256
8926e45352cc3d14efbeaf1e33cc3e17563a6f5ce85b1972bd734a664d590fd1
SHA512
74b5a4418eb346e8b7e4d3202653c1334b940e0555d9c027c1936cc3293e9395e5fe9184863016a263811ea848177870d835d390b284a9cb0d6be325e1836dce
SSDEEP
1536:u/7tY+plsUPpUb+ZLUh/FwZTSIAoQ/mU2+EghdDo:uDW+plsUwoLUhtMtk8+JDo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a51c86548d8c24e5c3c4f2521aa831a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE