CancelDll
LoadDll
Behavioral task
behavioral1
Sample
407a80a8dd0a10d78cc5d2af5a9bf2b9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
407a80a8dd0a10d78cc5d2af5a9bf2b9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
407a80a8dd0a10d78cc5d2af5a9bf2b9_JaffaCakes118
Size
121KB
MD5
407a80a8dd0a10d78cc5d2af5a9bf2b9
SHA1
336e347da3e073a0aa73b81a1b79c3b0eb1e5ed6
SHA256
1ade929d9446a5fb173d02f44889fd9cbfbd2a0331c381ebbfce79ac6eb2b3b3
SHA512
2d9673f34193b2d9c947534965ad6b0966b08f56f6a69e878bce7308a97530d947b8d3b17ec78c475c4dfef0db1538d7e56fc63e5528f20e42e55eb59e9e0bb2
SSDEEP
1536:qJOicqgmfzx8xnhBbgA6U86eeyNIG/FgzVC0ItjT3syAm9HaHaF7vqRG9g:oO+Bd8Vh26DEIG/Fg5qtjQMHaHaFOIg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
407a80a8dd0a10d78cc5d2af5a9bf2b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE