CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2f2fd3210a548598abf57fcdca88eade_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f2fd3210a548598abf57fcdca88eade_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f2fd3210a548598abf57fcdca88eade_JaffaCakes118
Size
94KB
MD5
2f2fd3210a548598abf57fcdca88eade
SHA1
90f2a95d0c639b0b8b1e41bb7c294d748eaaada3
SHA256
1876b3b16bda2f17820e51d2babbacc49c25823c464c2fde55786cb4fd41a5a4
SHA512
73e4aa4083ab5f9987c0f519620776061bcbca75a4ddaf8863c3437350ab214e6f024ee4315c591dbca1a6c1c94546e608600684aa191f8bec53d56ce48217bd
SSDEEP
1536:pySXN/9GhFgVhQgN4+pskr+KPgPuce0vdh6h4Q7nhj2/IryCS:pymhYhCqgNzpsWpPgqkdh6hxnV2wFS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f2fd3210a548598abf57fcdca88eade_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE