CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2cc73845225af6d8f84a5800b5ab22a0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cc73845225af6d8f84a5800b5ab22a0_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2cc73845225af6d8f84a5800b5ab22a0_JaffaCakes118
Size
97KB
MD5
2cc73845225af6d8f84a5800b5ab22a0
SHA1
ece0920459345b5f2dc1d55b03c5a92a58b85df5
SHA256
376819f79fb813863234fba781a2bd7086d2ae6a34e726c705a9419386d8e134
SHA512
4dca5c97dc829079d099c531702041d9bb3f89e7a6b07a6c2ea3638f8ca68813d867825fced0b35a406c775eac791a14f3bc9d8d64b35d0acee73f12fcc785e9
SSDEEP
1536:aI9js9B05V54qQC8ccyVgPFREiHjh58/0YLoteuWZ+MeV+ddnTipKWH:Xjs9B6As7crbjh+/09+EaTTa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2cc73845225af6d8f84a5800b5ab22a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE