CancelDll
LoadDll
Behavioral task
behavioral1
Sample
253a44fd3d46bcf38d611f96d0ff89a4_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
253a44fd3d46bcf38d611f96d0ff89a4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
253a44fd3d46bcf38d611f96d0ff89a4_JaffaCakes118
Size
110KB
MD5
253a44fd3d46bcf38d611f96d0ff89a4
SHA1
553f8ca9f8ff3cd01570c63a0ded009107d3e077
SHA256
1298c954ec0abe985c8015fac4f543162260c6f7834cad2a614e7b73967089d5
SHA512
b42beb76ed8f11e20f76b3a4b40f5261917d2f9ba381e44f1d7b20a929cf7533943612c4a201024fdaad9cee2ff61444eea9286d0001f588dc12641bea32ed3e
SSDEEP
1536:Zr4dVzqJdgJhjJKSYDRLtOXZYafPWe73kUEmHm8wb6p8qB+hm7cGrlAsO2p:ZEdVzq4/j5/pXft3XEc/wb6F+hcAs3p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
253a44fd3d46bcf38d611f96d0ff89a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE