CancelDll
LoadDll
Behavioral task
behavioral1
Sample
44b8e0c3ca5b8587f24f4686c3f1eca2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
44b8e0c3ca5b8587f24f4686c3f1eca2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44b8e0c3ca5b8587f24f4686c3f1eca2_JaffaCakes118
Size
126KB
MD5
44b8e0c3ca5b8587f24f4686c3f1eca2
SHA1
74728ef47dd194fa4afc4bbf239bdf6254d13d89
SHA256
11a74451e42d6e2fe78d1bf1c54774dbef3048c3d339be6df9d9a0056bab5fc9
SHA512
a84e8e2a1b3c22387af1cd0e7d4cb014833d7eea764f25bb4ffd62d29f29fe1c9be34be02e8f09c3d594556371cfd57f65839e84a071ee1e4291185eb091d5d0
SSDEEP
1536:IJrxM1wLW8DYcHcNRlzcXMDEKhdn24uNRzzYKHfZFc4waAbKz:Ixm8DYqcHaXMDEKhdn24uNRzxf/cevz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
44b8e0c3ca5b8587f24f4686c3f1eca2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE