CancelDll
LoadDll
Behavioral task
behavioral1
Sample
41e8c6df4e58ff8110134474f65b0168_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41e8c6df4e58ff8110134474f65b0168_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41e8c6df4e58ff8110134474f65b0168_JaffaCakes118
Size
82KB
MD5
41e8c6df4e58ff8110134474f65b0168
SHA1
057de4fc43dcdd2516f716ae997943736c274fdb
SHA256
cdb9b8b1d2bcd426bd1960eb5e11d7849980f7b4666cd958c9e11c6c6ad264b2
SHA512
f1b77f2c8aa83f57742400528e0b460d0206b2e3f0e3d15079ad5d245a4fdaff72a368bd630f0d97ada03c507704c049519835759a56a10f127adbb7835accfe
SSDEEP
1536:lmoLIIWdNE9jv4LsFgI2rlru84yxTYnkniZp9IesWqUxN:02RWdNEp4LsixBrudiYkcP6UxN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41e8c6df4e58ff8110134474f65b0168_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE