CancelDll
LoadDll
Behavioral task
behavioral1
Sample
602b107c8bb30889184275e8183d1844_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
602b107c8bb30889184275e8183d1844_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
602b107c8bb30889184275e8183d1844_JaffaCakes118
Size
81KB
MD5
602b107c8bb30889184275e8183d1844
SHA1
ae7ddb57a8e4451ad3e8952eadf5d75bc5f0428f
SHA256
b9d9fcc167031d578141125c0213387faf605afedb35b60ea09b8e38aae0626b
SHA512
37c121b77b704c7f23829ddebdc6761b1da93101d2d2c418984e60b03a94b2eeb7f4dfff417678bfff34bdee6670e5b7801e2b5877d11ae340144ab35c8cb1ca
SSDEEP
768:y3rZEz6fbtEsnyM/tFz0mKEG2GO/fTspfgh1rjIDmu6K0j9Hv0Y34s+KkM2SAGDo:kFjbtlR0g+MSmRxHv0YIadwJLoQY/w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
602b107c8bb30889184275e8183d1844_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE