CancelDll
LoadDll
Behavioral task
behavioral1
Sample
632f9b2e4fa4a7740f0ff2a5286ff3a8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
632f9b2e4fa4a7740f0ff2a5286ff3a8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
632f9b2e4fa4a7740f0ff2a5286ff3a8_JaffaCakes118
Size
92KB
MD5
632f9b2e4fa4a7740f0ff2a5286ff3a8
SHA1
7c010c6e1000bce6bb7b12e3269d847178280bc4
SHA256
741f8a4a3c414e1ceee8af16c61937258a55e539b880e1cc3e93149ce5bd61d1
SHA512
c25a3b7912ed6062bfb6e9e98bb90e6cfa1adf8f0829dc21f643f9a41628133a01e73aa8adae1dfd2517088adcf3919711c489679d2c5ba34fed77e78be2a4c4
SSDEEP
1536:RzL079679wo54XGRoSD9vjz10nI35P2TxD4gN9aZDdFEorV:RLm9679j5UHSxvjz175PMDYJFVV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
632f9b2e4fa4a7740f0ff2a5286ff3a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE