CancelDll
LoadDll
Behavioral task
behavioral1
Sample
44e1f6d9b05d8a4aecea73c2a2920a67_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44e1f6d9b05d8a4aecea73c2a2920a67_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44e1f6d9b05d8a4aecea73c2a2920a67_JaffaCakes118
Size
93KB
MD5
44e1f6d9b05d8a4aecea73c2a2920a67
SHA1
dc0fd128f3addd40742f6930193f03c64d7ee730
SHA256
90faf006ff0096f3870a5b8bf094adee8fef2b5f7b02ec2104337d87219a8643
SHA512
0777e5952cad37b3eae05e8577b2d9100e59128d549503d5374cc1aa96b02715412b618aaa53cc18500f5545d4f5773a8b6b6c81cfb6df5d8d29f85abe21a1a2
SSDEEP
1536:AnSIWWZU3mEoghagRXIQQcqf++vsNwzlJ5QMD4+kMLp33R:ZF3mEvkgC54Ws+zlJ5Q+kCl3R
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
44e1f6d9b05d8a4aecea73c2a2920a67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE