CancelDll
LoadDll
Behavioral task
behavioral1
Sample
67536fb071538572f4f7e050029083ab_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67536fb071538572f4f7e050029083ab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67536fb071538572f4f7e050029083ab_JaffaCakes118
Size
81KB
MD5
67536fb071538572f4f7e050029083ab
SHA1
69dbfedb3b254d9cc32c6795671d5089d96a135f
SHA256
e10cdefafc89527b6b9c307b7c96375aaf2e7adaaa0f685ab173fa0e5f202b36
SHA512
8aef4b9303e04851e07119e37fd9ef68b29f6ad39d4ceb4951d68b41d213c11084b26c0bcb657f0ded1a99040307b65aa3bf6f29c50817504b6162b4d47de0c2
SSDEEP
1536:OVcGVEtjXCET3Z5GFOryj94cMSSqKyMGREUHI/I:Wc1jXTTp5r4mSSqKyBuk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67536fb071538572f4f7e050029083ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE