CancelDll
LoadDll
Behavioral task
behavioral1
Sample
321f69ac445556ade31d9c60b8228c8d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
321f69ac445556ade31d9c60b8228c8d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
321f69ac445556ade31d9c60b8228c8d_JaffaCakes118
Size
83KB
MD5
321f69ac445556ade31d9c60b8228c8d
SHA1
aacbf6554af728c5fccd354cf090a9c00942d5c2
SHA256
c5fea14dd41475969a5b225ebaeda6e8b02a54263f589fed8645877a336f219c
SHA512
c968077954b6a60819e0431f1f7df1d176888529df3960c1dd3bb81897f187b8f1237c0f82004e9bc664a2687d445f6c332ec8aea310fc0695f5e1db332f66c7
SSDEEP
1536:0SBGICmjXCTyBetAx5BuAFqe4xX15zUG7i36tqbhP9pbl:/BMmjXCojuATM+gShPTbl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
321f69ac445556ade31d9c60b8228c8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE