CancelDll
LoadDll
Behavioral task
behavioral1
Sample
17ad1c61b4eb14035053f783b2f5a6c1_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17ad1c61b4eb14035053f783b2f5a6c1_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
17ad1c61b4eb14035053f783b2f5a6c1_JaffaCakes118
Size
111KB
MD5
17ad1c61b4eb14035053f783b2f5a6c1
SHA1
b6c2e25268e3483e7529ed8fa170617a668a91a2
SHA256
30ff913fc2ecaa3f5cf78fbaae65452b96fc9f1a958f9e7efe8faa8f985107e2
SHA512
b455a561a97f1df25061d0957d22c7f3b0d49e6b209ddf2ee433ec18dd962a391f811aa34ad827bf9dd6927a6e61e45562a4b0904543db0b2ec16ab888782ca1
SSDEEP
3072:ahdIw/oYD/HPcxCikpMfC849z1CIWalvO9EOykzS:ahB7D/HPYCsC8SzAIWalvO9ERkzS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
17ad1c61b4eb14035053f783b2f5a6c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE