CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2c2bc1eff6bc3694bc60195511c9652f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c2bc1eff6bc3694bc60195511c9652f_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2c2bc1eff6bc3694bc60195511c9652f_JaffaCakes118
Size
97KB
MD5
2c2bc1eff6bc3694bc60195511c9652f
SHA1
a7dbe9ae6d66cafb03511f6b9d1c37b99fc1a124
SHA256
d8bc15797b1923f0b3e45c6ce3dba97c4728ff68bd82257a8be0cb5b76fe2f54
SHA512
d6a2e43f305ee3792dfef7ffd982262c32525c138268eab32b9f9514f9c13da8e87dfbd2c5a02204aaa4e90064f1b10bbbdbf32c413ceccd68f9bde12edc3928
SSDEEP
1536:4G31s6OxArk6ytVNWaRU1ylEKLZlzJjtdUqPb4zhjRx7jxQB3MUO:B3wxV33ruylE2LzJ71MzhfSB3VO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c2bc1eff6bc3694bc60195511c9652f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE