CancelDll
LoadDll
Behavioral task
behavioral1
Sample
60efd86a5341c2d9b8cf47d8262332b2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
60efd86a5341c2d9b8cf47d8262332b2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
60efd86a5341c2d9b8cf47d8262332b2_JaffaCakes118
Size
65KB
MD5
60efd86a5341c2d9b8cf47d8262332b2
SHA1
9fc98c8cf8fbacd280ff9f2722ce951e83ba12bb
SHA256
a07440085f4e15d7fb88a78187464053c7c1d1d21e8b542b12041837a062ffaf
SHA512
8d9ee6864d7822fc6a2b07f23c5b9196cc2dbcf924391278e5d47b085264e0bc7cd5cadcb5421926de371f1a7a68bc5efcaac4a765baea83a80f7626d56e15b3
SSDEEP
768:DQitdMXaOUOAEnJMuutB+PeCq9ARnbsnJhdQJ435Lkm6kG30dA5X/9xrr:DjMKODJPutB+69AmJktmi30d8vXH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
60efd86a5341c2d9b8cf47d8262332b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE