CancelDll
LoadDll
Behavioral task
behavioral1
Sample
25747ed8045a80515842a806ddd975d6_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25747ed8045a80515842a806ddd975d6_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
25747ed8045a80515842a806ddd975d6_JaffaCakes118
Size
91KB
MD5
25747ed8045a80515842a806ddd975d6
SHA1
d217f08a9727320c6cf3dc41bcc9f7f4d7c8f469
SHA256
edaaf057a8dedd074d1a2e3820e6e79ad7719ab8b21923f13b0ab83f94b269e1
SHA512
bf794651c6daa4e5cf01e9e37a2dfa4c0a7d4df4dfdefd8df7e67f5daace870c9317f651a6d0f1c89086819de2c9cd266ffdf3f7d4df56457609a6bea46c7ca5
SSDEEP
1536:J3iyDPFw2bprmjLldECl5zCIDLRpL9OpTVL+KS:1Tw2bpCnECTzCaLRpLkx+KS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25747ed8045a80515842a806ddd975d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE