CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2e96fdfac1d85ac73c4e29b469dbed52_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e96fdfac1d85ac73c4e29b469dbed52_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e96fdfac1d85ac73c4e29b469dbed52_JaffaCakes118
Size
6.4MB
MD5
2e96fdfac1d85ac73c4e29b469dbed52
SHA1
c179c4e5856a678def741a2efaf9fe39a8148545
SHA256
9d06120e9f5d6a04ad74b7bd0da8f667ad8f6027916e325b3852bf09edbc7fb7
SHA512
f85d9c3007d4667cf24ced147ac77be0dcc700ee52c0931b4e9254c4e8ebf8b962c293655bf5606eb1fe705312a94d46bed10aaa77f8b9dd39304e01bf8ae726
SSDEEP
1536:aegPWgmgz5YXjfGA9F0vPKAB/3s9+J1aEcY3UnkUPenSWcHhZWRIFY59:dgPW5g9YXSCuvP3ioj3cYETenII99
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e96fdfac1d85ac73c4e29b469dbed52_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE