CancelDll
LoadDll
Behavioral task
behavioral1
Sample
41c45771ce7e9be3a7e7aefea8b9ba03_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41c45771ce7e9be3a7e7aefea8b9ba03_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41c45771ce7e9be3a7e7aefea8b9ba03_JaffaCakes118
Size
130KB
MD5
41c45771ce7e9be3a7e7aefea8b9ba03
SHA1
d8463135f5ac2aaaa8153ef846b383ff3567f6c6
SHA256
5ec484d18e247272fe3cd4a214740781f8fcddc1c0fdf106d000f9198d0e9cc7
SHA512
1c7ffe08c016a4c2c6a28f5224eccbf13de325455ea36f49856c5cbf2392b99b05aa5cda2b5bed4fc6f6ca90107d1af82e2db9ea6a9b31e1e50e65d451fd94f6
SSDEEP
1536:6Rw9k6k1FrHc5NWC7KV2p6oNXHVJk6Dg1HupDtwNTG+/ltXLO:/cHr8tAoNXHVJZg1HumTG+/ltX6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41c45771ce7e9be3a7e7aefea8b9ba03_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE