CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4302461ef95b137dba0857f450b17e74_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4302461ef95b137dba0857f450b17e74_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4302461ef95b137dba0857f450b17e74_JaffaCakes118
Size
103KB
MD5
4302461ef95b137dba0857f450b17e74
SHA1
f6f895526e10aae18d466e61adb9a9a53a8a7530
SHA256
0020264c3fdd3aa48d593db828a64267b40a141c9eb0323e5874c39ee3e7746f
SHA512
f968921327f5f1dec04f03dba327374f10b84bb50a6b068d7bf6b865904e9f154d70b1b3353123b119a284e1c9c8ad4722368011afb1a852db31ae0fc023e532
SSDEEP
1536:OVcGVEtjXCET3ZysEa/ykLPN+L4qifz8c/2IU7rsy6I4NXi8:Wc1jXTTpyhfkL1+L4zfz8hA64S8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4302461ef95b137dba0857f450b17e74_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE