CancelDll
LoadDll
Behavioral task
behavioral1
Sample
62ff2a95f6de3057a38f8499a3677e67_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62ff2a95f6de3057a38f8499a3677e67_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62ff2a95f6de3057a38f8499a3677e67_JaffaCakes118
Size
6.4MB
MD5
62ff2a95f6de3057a38f8499a3677e67
SHA1
c77faf89445c21eb52c45330cef1448782513009
SHA256
7d1dff6a5907c3355b0ea48b4c64c0caecd7aadb37fd844d4a26e208c9c5b1a4
SHA512
ed145c52d7a543e5f7cf783267058bb0f0102a903fcd32ffe5d35a16f85a9ed99e548567aca8e20a04e21dc6385f67d07e0564e0d6d8858eb80d59363b1ce538
SSDEEP
1536:+wRmhQ/5xJ04CK2buOK/+dNlEq1w92pdV/22UVV:+wRhw4CK2VjEq1wgpn/EV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62ff2a95f6de3057a38f8499a3677e67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE