CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2edb5959e16c5f356e9b491f0f4c5ce0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2edb5959e16c5f356e9b491f0f4c5ce0_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2edb5959e16c5f356e9b491f0f4c5ce0_JaffaCakes118
Size
124KB
MD5
2edb5959e16c5f356e9b491f0f4c5ce0
SHA1
49bc4ddda1831bd8e3455b61648968e1a24e0b6a
SHA256
56a02df4f60963eaa5fe0defbad829f53ea45b458de4f29388d064e40bd62012
SHA512
a358047d7fe7dbc76ba98e3155a79b4d0b529d8e3de40997d4585c1543b470af9eee0fbb9aced0908c0e2ca769d720f222def8ded49dd3ae96a81ec30fadf30f
SSDEEP
3072:l9L1xm6hpbVcgIs/iWTAuevL3G9vngdox:hnhppBIs/3MuQ2Jng8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2edb5959e16c5f356e9b491f0f4c5ce0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE