CancelDll
LoadDll
Behavioral task
behavioral1
Sample
322c250fea9d1f0abd3b3ee44fb9d1eb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
322c250fea9d1f0abd3b3ee44fb9d1eb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
322c250fea9d1f0abd3b3ee44fb9d1eb_JaffaCakes118
Size
130KB
MD5
322c250fea9d1f0abd3b3ee44fb9d1eb
SHA1
18a8b2f7568f0f5c00520335eb9e4d64f52075dc
SHA256
7a1406ed0f77af3b08d27f323abdd85ad292d187f068846855094aafd53528b4
SHA512
1aac828869caf39604f59ddfbc30e3635b5f29013173f78ff0c1923e6ce1b7c0b439569b86d2e55b2ae1cca5025ac6c9a9ec74c5a4ced09bb4606d9d796a8d93
SSDEEP
1536:MDEFUawhF/H8fOZIudjyOxmz37XTlZNKZqeviY8dcfPlthTJQmU:j4D/cUIEFU3jBs6ZdcfNPTE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
322c250fea9d1f0abd3b3ee44fb9d1eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE