CancelDll
LoadDll
Behavioral task
behavioral1
Sample
41040f75afbb237fc7e0815be78d3677_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41040f75afbb237fc7e0815be78d3677_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41040f75afbb237fc7e0815be78d3677_JaffaCakes118
Size
91KB
MD5
41040f75afbb237fc7e0815be78d3677
SHA1
588ce99f2dac1b1a3f8b32c6791cf0bd035f9056
SHA256
45da9df23bfa0f6c46c9887d15771b522eb25de87461fd621d62845149598f47
SHA512
6bf1e8ba768ae0200be5351d86870f234bcd47ee5ff22214c7dfd0ab39be9c50eda036548830f2e6acef6f55bc1a2f35134988b0104aebd66d08056c01e9097e
SSDEEP
1536:MxvNbz0ZBTYCs6FJetuByWRn8xzsMn3xEcMkXyvLLW:OB0BTYCs6qRWRAzNCcMkiHW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41040f75afbb237fc7e0815be78d3677_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE