CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6321a9beebe63d70389c17e22039f903_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6321a9beebe63d70389c17e22039f903_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6321a9beebe63d70389c17e22039f903_JaffaCakes118
Size
107KB
MD5
6321a9beebe63d70389c17e22039f903
SHA1
9bc6741b6f97ad3b3e15f427178ba87b8959b798
SHA256
e271fd297f57c0931e6cc43b0c69d4a1cf2f9545a7169ea377af041a7db90475
SHA512
22177dc2d6e357ddc74309b4d94a9aa14f9c8ad1abad08c995b864023a015804a0d3064f95227cb8774dd7cce991209f7d930ce4545c79ba86579e7a51c0cf99
SSDEEP
1536:Mpsox7IB+zcZqFiUbP8pFn3LgGRYHojqu29qgKdpL2wJxMWb/0Mujx:MOn+zGnUr8T3LgSYHoudZKTqwJxMq0MG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6321a9beebe63d70389c17e22039f903_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE