CancelDll
LoadDll
Behavioral task
behavioral1
Sample
45ae0eedc4c716c758a0531e8d473c08_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45ae0eedc4c716c758a0531e8d473c08_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
45ae0eedc4c716c758a0531e8d473c08_JaffaCakes118
Size
91KB
MD5
45ae0eedc4c716c758a0531e8d473c08
SHA1
6637baffc847e85eac4bd40a75d16d4b951dd297
SHA256
91b58b913cee5f1a1484e0860a87b47d5f0571757614db9e6841a39d8012e476
SHA512
0b0c207f047094827d3c0fa2d04888a501e4db771ebdca969139c37cb33d7dc21c15c631f78f9c2f69f3604d2be3768d54d43eb85a2501958ebe37fb638043c1
SSDEEP
1536:SQclh8MIwu5+oYFVsKHxBW2mig5EYU26ACc:ahdIw/oYFV7HxB9mVuAB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45ae0eedc4c716c758a0531e8d473c08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE