CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
b009ccf4597238f38fa1d36d5f98e7b2_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b009ccf4597238f38fa1d36d5f98e7b2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
b009ccf4597238f38fa1d36d5f98e7b2_JaffaCakes118
Size
86KB
MD5
b009ccf4597238f38fa1d36d5f98e7b2
SHA1
e5118c3dbf2c645a28bd4f8fa6b9313745f26467
SHA256
623c8b0df2338d8bf2344e8c16eed4fec02aa8273b9a243d88c7194132e317b7
SHA512
b220a79f3a6cae0ee200fc31c94cf376f7aa733669da3aee421c07dcc8f3fb48d70f0f2f7ec956ad971a3b972c8857d3a635b8252242a2cf97ac6f4b741d4a16
SSDEEP
1536:pGKd1BpO5HrZphlGaJER1eAEMzhFpxXO4QgQUyRUcRM+Bl9sSSBE:pv1B45LZp/0eSFpVpQDUyicRM+BlubK
Checks for missing Authenticode signature.
resource |
---|
b009ccf4597238f38fa1d36d5f98e7b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ