CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4125de355cc536c16bee0a948704e2da_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4125de355cc536c16bee0a948704e2da_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4125de355cc536c16bee0a948704e2da_JaffaCakes118
Size
80KB
MD5
4125de355cc536c16bee0a948704e2da
SHA1
bee88f6b896811b3cda4a599b92f67d43b6aaa52
SHA256
1f6b5fe4bdf19f85e43927b5299cf93de8b2d51db2716d0315da48d9028368c0
SHA512
e3a3fc4e85e7f86cd7c71ba1c3ade31a0fd7ddb031a18e5788f2b9ba65c6300eb339635eed8a3d9c50239c0849c673ec80919ad78be35c32522edc9f5eb778a7
SSDEEP
1536:DjMKODJPutB+69AmJRs9iKqMDI6+og5KUw9A7UyxSojq:+MBpAm3mzkcsKUwdyxZq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4125de355cc536c16bee0a948704e2da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE