CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4299f25a7059dd7e7b5aa768b25024b6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4299f25a7059dd7e7b5aa768b25024b6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4299f25a7059dd7e7b5aa768b25024b6_JaffaCakes118
Size
92KB
MD5
4299f25a7059dd7e7b5aa768b25024b6
SHA1
ea285152ab7bcefcefc8a0b6b05a4d96239d63a4
SHA256
acae12dc670a5dfe640e1cf25a5d19b9348860f6020b6fb4475bbfd20255acc8
SHA512
0a23e1c64cb3911a161c2805bf8bdc4fdba3c284bb9ccd10c90bf17323edb1a684975c2e84003860257a2b3f0b25156a85e3956e26aad21e0463d4cc0dfd6182
SSDEEP
1536:aI9js9B05V54qNSQJmp3r5HRJrDY8R7F0dLC4v:Xjs9B6ACJmp1Hn8oFQLrv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4299f25a7059dd7e7b5aa768b25024b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE