CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6247f149eb8393a6036679211c857dcc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6247f149eb8393a6036679211c857dcc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6247f149eb8393a6036679211c857dcc_JaffaCakes118
Size
93KB
MD5
6247f149eb8393a6036679211c857dcc
SHA1
281e6707065e7f1bbbdc571e998091e022308063
SHA256
e94a334aab3c1455e0ab5b9b406b2aaf9bcb37a57a90ebbefa12eb7f3c2ebf40
SHA512
e8ae0e1bea33e4bf78e972fc0015c723104ae77be560239dbb8885262b6dba6a36c4adb0fb68777206c3e3399adb4f24c8e2504ab232cada019ff4f655eee7f9
SSDEEP
1536:rVGqeHHrjdj9xcCLweQPoKVUrcLFYCUl99:rKLjdjLcCPQP7yrcLvE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6247f149eb8393a6036679211c857dcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE