CancelDll
LoadDll
Behavioral task
behavioral1
Sample
15ec426a4ad922521e7c2ecb446e5242_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15ec426a4ad922521e7c2ecb446e5242_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
15ec426a4ad922521e7c2ecb446e5242_JaffaCakes118
Size
90KB
MD5
15ec426a4ad922521e7c2ecb446e5242
SHA1
5e7cb2a389cba4a95acb5246870fbe0840215f7f
SHA256
57524fb70d1238001cad22db511abc889a0c56f95529a5b4a0db7b05fa0a32d8
SHA512
34623988fe1c73ee385c251bcd73abecd658bcf130b26fb18ef53fabe1f5aad24063cfd98bb336a04e9669061f077e433e2274813fbf843c5e844ed466c3ff00
SSDEEP
1536:uRtNn1pUBR8S8XFFebsU4jDBCxbhSEHvPUfLPypgFrb05wxmubuAw:uRtNn1pU0S8XFFMsUaC5AEHvs7Sgy5wq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15ec426a4ad922521e7c2ecb446e5242_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE