CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0832516ba0c5c5c67e863bc45ed4fd55_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0832516ba0c5c5c67e863bc45ed4fd55_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0832516ba0c5c5c67e863bc45ed4fd55_JaffaCakes118
Size
101KB
MD5
0832516ba0c5c5c67e863bc45ed4fd55
SHA1
5563d572a80de52a1ae0a7ff519d138536560b0a
SHA256
b61973e495991fb941e7cc2fa611bb2dd70def4488b1e2ff93ef8c0aba0d06e2
SHA512
5ee109753ba2bdb62a211e4ff5cbf0969d10915bc36ed548e6444e86bcd97d95773640ccef4190f33baba17ed8d0bd3cd1e1e2437158f1d4566861288aeb5cfc
SSDEEP
1536:MxvNbz0ZBTYCswaiRjfh9++she3JehVQqhohwH:OB0BTYCs0hk+shwULphouH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0832516ba0c5c5c67e863bc45ed4fd55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE