CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2616d4cc45b96776251d3724947b6c31_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2616d4cc45b96776251d3724947b6c31_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2616d4cc45b96776251d3724947b6c31_JaffaCakes118
Size
128KB
MD5
2616d4cc45b96776251d3724947b6c31
SHA1
261c4c155046a0f694b419360307ffd636b4dcf7
SHA256
6fc211ace89593d594dbe5350de0fd046b8a506d453c618ee30a24c35f2d5de0
SHA512
4a9bae088e12ad476630b93fa11163b7cd3ddb8266a5c1002fe715fef220d852cacc70257cb700caa77ce0bd671f08040a2050c5bed5988ca79369dec5c47fdf
SSDEEP
3072:l9L1xm6hpbVczMjHHBxNZoK2FP1+dwgkbh:hnhpp+MHBxVn2h
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2616d4cc45b96776251d3724947b6c31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE