CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
82a1a2d71f7aaf519fa7c1f7d1f1e1d7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
82a1a2d71f7aaf519fa7c1f7d1f1e1d7_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
82a1a2d71f7aaf519fa7c1f7d1f1e1d7_JaffaCakes118
Size
81KB
MD5
82a1a2d71f7aaf519fa7c1f7d1f1e1d7
SHA1
bb461d89a5947a081e2ed004bcb6b7a90a770109
SHA256
dffffa244fb50168f4be1df61e35479d62e1b242d4ac5dd0b090954a9a64f8d9
SHA512
b77fbb10d9712160bde4fa94b686753556e29fb6f1f1019b5ea8b9360fca540a5fa0cad7d83238a85c8c3721bfced7fe15e6a8f092b0ebe5a3a7f51d30a07516
SSDEEP
1536:HJF4L9mV6pBYpyDXTfFeUCg1K8bsxhfCqSSdn8Dob51NsWXl5BwA:HJWL9mVeYpyjTdeUCg17a+SdN51JXl5x
Checks for missing Authenticode signature.
resource |
---|
82a1a2d71f7aaf519fa7c1f7d1f1e1d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ