CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1797ad35a45d449da34d7de652b97341_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1797ad35a45d449da34d7de652b97341_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1797ad35a45d449da34d7de652b97341_JaffaCakes118
Size
91KB
MD5
1797ad35a45d449da34d7de652b97341
SHA1
b4ec196823a45b368dcfc0c41029eff28ddec132
SHA256
c815605654a2f45330ca976756ea87b107604c3e85c8066d09b6264f3143131d
SHA512
3703f66106c6de0cfcc4ee82e2b1c273501ccb6bed33f6d564570807ce640dc14e1e4e8d83c0892ed375f726a7ca7d4295b45e9b6df58217ddb37d79fa83e848
SSDEEP
1536:INWujxA5EY8fwKVPo+8mVou/ZcDRhkwlrmiBeoGOL:x/2Y84CPoUVhSDRGAm6eoGOL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1797ad35a45d449da34d7de652b97341_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE