CancelDll
LoadDll
Behavioral task
behavioral1
Sample
60a1570de78c2e2768890096f5fa25cf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
60a1570de78c2e2768890096f5fa25cf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
60a1570de78c2e2768890096f5fa25cf_JaffaCakes118
Size
87KB
MD5
60a1570de78c2e2768890096f5fa25cf
SHA1
0eb372423cdba7cc12917b238470384fcda714e2
SHA256
f9a3ee65369b60e4206f1bf2b5a4dc4bd585570db109354fe1f356d397141fdf
SHA512
0d5899faad7efbb927c562ecdfc1833f7087470fe2adbca725d997bb990e5c78e6664f8663067ed6c1fb3072328423c2463f50b803f3333574f2b7d08ec69652
SSDEEP
1536:2moLIIWdNE9jv4LsBgIqyKNNjnMLn4S+PoGKGVlDo3eAq9Ba9Oq:f2RWdNEp4Ls2uwNUqPoZcDOeAOBaX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
60a1570de78c2e2768890096f5fa25cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE