CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6727330cd9db10bc8f51bcd6cfe35fb4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6727330cd9db10bc8f51bcd6cfe35fb4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6727330cd9db10bc8f51bcd6cfe35fb4_JaffaCakes118
Size
102KB
MD5
6727330cd9db10bc8f51bcd6cfe35fb4
SHA1
a38ce33b593c0a37ba2e10d25ba8ba16b721479b
SHA256
2397d22ea8a5741bd08f08cb6dee4a79092ef10fde42973f5acf0b6ac455e295
SHA512
9b43faaa2bf1b3ddf402c5de4d31b1b635ee0058a4ad9ca04cd4c3519c2b7c03206e3280c44c4bd6346184741f0981e0b55f8ebbca593ffa0626d281b0824a69
SSDEEP
3072:ZVOReRyHGrLSvVnXrtBuFReQJQEr8pDlKfZ:ZUIRxLS7tBmeKQErCwx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6727330cd9db10bc8f51bcd6cfe35fb4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE