CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4468c99b38bf5a8daa1e8d06a0164387_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4468c99b38bf5a8daa1e8d06a0164387_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4468c99b38bf5a8daa1e8d06a0164387_JaffaCakes118
Size
104KB
MD5
4468c99b38bf5a8daa1e8d06a0164387
SHA1
60fcf3d854d932ff06b58dec8c3d48c156402007
SHA256
13d996d30519ffb3d2e050022e4c699be4512dfccb979fc690211c0b4318825b
SHA512
1d71ca5f6e33c49f30cf9cda6ae18d8f3b32ead30ef3f670f81885ad982ee28dd57b2b24202cf6ab809b0381d5fe7eda6f862f4582b853f9ff2338d55b062805
SSDEEP
1536:4G3uk8hPgcW3cunhBbgA6Ut5v8L0n8sUoXANs/tZQplQP:13sL6Dh75v84Fdu8P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4468c99b38bf5a8daa1e8d06a0164387_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE