CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0d4480ad89d55265839d30fb9a3ed53c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d4480ad89d55265839d30fb9a3ed53c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d4480ad89d55265839d30fb9a3ed53c_JaffaCakes118
Size
95KB
MD5
0d4480ad89d55265839d30fb9a3ed53c
SHA1
45977a5e1a023f860bac71a34623a7a51d3ad45b
SHA256
427a27aa785443bd0dacf75511ab57749afd02068c5c654f463a7ad7f52c4b03
SHA512
2fd45aa510c908ba89bdbdfcbcfdfb75b7ae75f1ace3cdb9d13513b3356bf3c0e9eede2258c2f85c9b008584cda08b8ccb828925e4ca8a5dd81f696d14aa9821
SSDEEP
1536:LmSQNbJE1vj8gDxkOg9Kphzr9s0gkB8OrneowxTx/lpa:LmFty1L8gDyOg9Kv9s0gkBJ9wxTxTa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d4480ad89d55265839d30fb9a3ed53c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE