CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4433283aa3e7c18f2c144493971bd5b6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4433283aa3e7c18f2c144493971bd5b6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4433283aa3e7c18f2c144493971bd5b6_JaffaCakes118
Size
135KB
MD5
4433283aa3e7c18f2c144493971bd5b6
SHA1
83df99bbd57fcaf91ddc9c94f23a4f5d01e01e4d
SHA256
6477ff62742dad286f6a716a2a941355bb79996acc7299131d491750c875fbcf
SHA512
07c4537dae7a7957a9ad9e135be69d6c1e6102f1073e0d15447e77f1d6d089512b1de38f9d7b317b3ae851555b59226ae4f0676a16f1d61b5b16bf12217c8227
SSDEEP
1536:MDEFUawhF/H8fO1CUUD8Z/efP7eRvpNlqHd8GDmos/rpydRrWjzdC:j4D/cG/efzH9lmx9ydRrszdC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4433283aa3e7c18f2c144493971bd5b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE