CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
4c0db1b19b99f3f603ed362c44c69b58_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4c0db1b19b99f3f603ed362c44c69b58_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
4c0db1b19b99f3f603ed362c44c69b58_JaffaCakes118
Size
95KB
MD5
4c0db1b19b99f3f603ed362c44c69b58
SHA1
db3037a169563eb64141fb4dee300d30cafff37f
SHA256
6b1ef5ab7adaf38bcef07bdbbb4c5eb72d32ea037f75b8496fa98e096556204a
SHA512
8cf5dd0018cad61df1176471808b241dee986926ceee60b1f1735e1a4129d3bfb0046c7466ebce1aa28239199e12a7a221777a0675b266d8ade945d9f405b452
SSDEEP
1536:XATDaCnID5+bsh2dt1RFpOh7vBW1iWyhaloaE0FTkxkUieKFfe6W60go:XwVA5+bsh2dtjcZQYQT+bw1W6G
Checks for missing Authenticode signature.
resource |
---|
4c0db1b19b99f3f603ed362c44c69b58_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ