CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6334c886dab5f16646e66d30aa03baea_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6334c886dab5f16646e66d30aa03baea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6334c886dab5f16646e66d30aa03baea_JaffaCakes118
Size
84KB
MD5
6334c886dab5f16646e66d30aa03baea
SHA1
2fbcaa259cfde53e7fa1e5b2a02c124b6bee7fc1
SHA256
ffd2bc738cab1e4d1f1504e19d40c3afc9f72840ea34b72b12c81b608fa3d926
SHA512
41f1e9e77d6f358a5e33b1bac38fa6c56ca371ef891aceaa8b00ac19f59d3d8bae8756743beac8ad6fc4fe992c6bc698eff882b41898ed10a0917a654d68855c
SSDEEP
1536:LbfRsoNi6NO3xLr4FpN8lyFcRitQkOXLHCqc:PsgO35kf8EFccSkO7rc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6334c886dab5f16646e66d30aa03baea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE