CancelDll
LoadDll
Behavioral task
behavioral1
Sample
25e6d9e48cdd8e2b8c826deaa57e3c94_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
25e6d9e48cdd8e2b8c826deaa57e3c94_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
25e6d9e48cdd8e2b8c826deaa57e3c94_JaffaCakes118
Size
76KB
MD5
25e6d9e48cdd8e2b8c826deaa57e3c94
SHA1
d153b1c45eb002214a09b686f0de2fe594ead75a
SHA256
d323d649af3667348c9f61afa1afc82a23e73474e87b8d5d93a5217ce714f1cc
SHA512
bafaf69f5b77739b5420d428b65e2bf281c406fcc8ad65c139407636e4ab10edbd40484ee20be0df4376ef2168847f5f7a7aa28653fc26092711c78c17054f9f
SSDEEP
1536:aI9js9B05V54qREvpm74eGSAiQ9PU3nyJkO:Xjs9B6AnE4eG0uU3nyJf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25e6d9e48cdd8e2b8c826deaa57e3c94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE