CancelDll
LoadDll
Behavioral task
behavioral1
Sample
40ad65c6ffb3c57aef21d83c7c0cfc1f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40ad65c6ffb3c57aef21d83c7c0cfc1f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40ad65c6ffb3c57aef21d83c7c0cfc1f_JaffaCakes118
Size
92KB
MD5
40ad65c6ffb3c57aef21d83c7c0cfc1f
SHA1
46469758b4cbfe2c9f3a181bcb4c785a9b0b752e
SHA256
de2fb6965265e0057548fa3ed54edcb7ee1fb3af319ad673023e1e4aba6c0533
SHA512
8b202289f855d82b1987697402648f1f5333311dfedace4be2ab4fc01deb1834b241acff3ca9e0c35cc8b72fba70a3f667bb7ee8b94381724619c67be3e21044
SSDEEP
1536:XpoZectu35iLnGlfahGyLJxRpkcBSV0N0om2O5Gdqm3NSYaU:XpoZP8ijIfasyLJrpkcBSWN0P9GdqQhd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40ad65c6ffb3c57aef21d83c7c0cfc1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE