CancelDll
LoadDll
Behavioral task
behavioral1
Sample
62bdbc94a78318bed3e0453d3587daeb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62bdbc94a78318bed3e0453d3587daeb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62bdbc94a78318bed3e0453d3587daeb_JaffaCakes118
Size
145KB
MD5
62bdbc94a78318bed3e0453d3587daeb
SHA1
5ed965ab0b611df6596a17225e9df82913c19945
SHA256
768ab19ff91202469458927d51a2e4a6cdc8d361ad4ac09ed109af4be2c9f2b6
SHA512
4a6d1c9ad92bd65d15b3959797cecaa186b3f0e318743477c3f9e5eaead829351c05a67ea05cf0e885ff65f1f1fda0a55cdecd6d5622229e50d252652db552f1
SSDEEP
1536:6Rw9k6k1FrHc5bCFNA73lS3vVxxa+SB9pYU9OzgFrTfmyVq:/cHr8KNK3YvTxqiUQSrrVq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62bdbc94a78318bed3e0453d3587daeb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE