CancelDll
LoadDll
Behavioral task
behavioral1
Sample
65501cd054544edaba72a32afecf8bab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65501cd054544edaba72a32afecf8bab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
65501cd054544edaba72a32afecf8bab_JaffaCakes118
Size
90KB
MD5
65501cd054544edaba72a32afecf8bab
SHA1
ebb9ba36d1f03f08d745c9f73159956670e6b132
SHA256
2f8ef13ada75d565a263b10bf8c470802addb02a7751319a4e269944e7ed7ca7
SHA512
a9e7c5939345742ff43c281362f879a0ba301a4a0fb07446a3edbe1323d7d29f4f57919fa2839218a1da2a582071fa8d88c49db8397ac124fe01e7b6d148a812
SSDEEP
1536:j/7tY+plsUPpUb+ZLU0/Fw7c6iXEDHgxIA8fLm4tDZHIxZ0OWKfrvAi:jDW+plsUwoLU0tCJtmsDZHIVWKfrIi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
65501cd054544edaba72a32afecf8bab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE