CancelDll
LoadDll
Behavioral task
behavioral1
Sample
644315a2ecdb15657e3b7ea169c26189_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
644315a2ecdb15657e3b7ea169c26189_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
644315a2ecdb15657e3b7ea169c26189_JaffaCakes118
Size
93KB
MD5
644315a2ecdb15657e3b7ea169c26189
SHA1
cda8513c6244897534b79beb6bd6f5531b8278e1
SHA256
80e91a12ed170ad228360ab982ce4cc94811015bfe513407f9b6feb62a9864ba
SHA512
05152c9961251b24490d98f0416afd8876c87dd1c9fb49f17d515ceed9a87b4fcedc6937af49da82edf6a968c7ebf0ca711e43c035a26663b87e4dd8b7436e5e
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr74E9BREufOu/MMEBpoZQTD/ARjamAnsAA:03/KeW8V3rQs4uXQfIRjamAnLA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
644315a2ecdb15657e3b7ea169c26189_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE