CancelDll
LoadDll
Behavioral task
behavioral1
Sample
661567880397bdcec6edf0cc07c134f4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
661567880397bdcec6edf0cc07c134f4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
661567880397bdcec6edf0cc07c134f4_JaffaCakes118
Size
112KB
MD5
661567880397bdcec6edf0cc07c134f4
SHA1
34bf72618618e10d790e18c017c5ac8d46e12f98
SHA256
60d28929e884225ca6692b417eed7d0fa32d22a6dd48840fb5ae0daae32fcc3b
SHA512
5144187307e11611ea585e17f943b4fae609eff6a4ef092650c8870c5e1bc62af9473a785c2f86214f52c641006b765daf8b58820e33c05f7ad047af87a55a79
SSDEEP
3072:TDGYLwwmOwdKxYkMQr+QFvBPLvj9hivYb:nwwNwdKxYkZr7FvBPbj9KYb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
661567880397bdcec6edf0cc07c134f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE