CancelDll
LoadDll
Behavioral task
behavioral1
Sample
65e6f9a0268b82cc7c85340e54621c9a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65e6f9a0268b82cc7c85340e54621c9a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
65e6f9a0268b82cc7c85340e54621c9a_JaffaCakes118
Size
92KB
MD5
65e6f9a0268b82cc7c85340e54621c9a
SHA1
75e30140391bf3cb8b6edead751d940776ce9fb0
SHA256
51ad006813fc37df12dea05a5d398c8aaeaa16eed4a11993e932c61be96e86f8
SHA512
ff314ed35eda7bd623174fd819cc91f0ceb4537515b45f9cb8cdbdf92758aae4081f3dd56519324febd9d1c410f45061603f6c35c861ec916b29de690eaf3e8e
SSDEEP
1536:qWNTI2j7IGPmy5guIRpL1qUqBXF/OdhxgFvQreawtPXslV0Yhrln9I2iMe:qWNTHTey5HCOUqBXF/O73StPXi0YVlnu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
65e6f9a0268b82cc7c85340e54621c9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE