CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
0c0256532885a53d054a9cd7f03b39b8_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0c0256532885a53d054a9cd7f03b39b8_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0c0256532885a53d054a9cd7f03b39b8_JaffaCakes118
Size
58KB
MD5
0c0256532885a53d054a9cd7f03b39b8
SHA1
ac1dea4cba80400738528071c15cba57e01050bd
SHA256
fcb281dfbf2e9f6924d0d8b53e00ed0505be869aef06395b973f0803efafb105
SHA512
9acb22cdd4eefc94d4fdee2952a74a3992d6e3cef3558e4d229f699aa226b8b8927d8e1134a5a516527e2b76b8aef31015dec9bf3aaff403df906925c002297d
SSDEEP
1536:HJF4L9mV6pBYpyDuwcWEMi8vhhsVQ1SA4cgw1a:HJWL9mVeYpyhHFhGV+Sxz
Checks for missing Authenticode signature.
resource |
---|
0c0256532885a53d054a9cd7f03b39b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ