CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4291e915869c63d512d718d9f863b826_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4291e915869c63d512d718d9f863b826_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4291e915869c63d512d718d9f863b826_JaffaCakes118
Size
139KB
MD5
4291e915869c63d512d718d9f863b826
SHA1
02a3789a28605aef731ba7e80983fc1087b7ae4f
SHA256
303428abfaefe7a2e22c584c7f1077c2f84f73ef8703be7ef70089945686c2e2
SHA512
f89994cfac89823e2c3753df0c16bb79c681ef1b14891f963bd08bceb7c00047ef5831407cedb148c24c2447ed9d12cf4ede74309a08751f235f07c9b280d7d2
SSDEEP
1536:MDEFUawhF/H8fOFqKWXgSu2qE1o4OBlY8pjou8I8nP3nlSJt4:j4D/cYqZdu2qEecwOIE9A4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4291e915869c63d512d718d9f863b826_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE