CancelDll
LoadDll
Behavioral task
behavioral1
Sample
45f580aa265ce7db7357c311dfcff65a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45f580aa265ce7db7357c311dfcff65a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45f580aa265ce7db7357c311dfcff65a_JaffaCakes118
Size
94KB
MD5
45f580aa265ce7db7357c311dfcff65a
SHA1
d797b61d5d883343b6bd958394112a5225f93bd1
SHA256
d55e005a67ddab9b30bf0a05c6ff21e8c552ea5fc11e685ba2a52e02ed1de146
SHA512
b91288ce51b6137bb44f7d092e7ee510e566b03529c69835e2dd9fe582a8d3f0c6a5ab2cc536a18f88b1f7fe174d10e80a5c013bf8699ad3942abaead2a362ca
SSDEEP
1536:/xLK2OReR3CHARLJ4l5ALpCv9W/UIuKfG87MUxQGBe6Oz:ZVOReRyHArq5ALpCv9WsdCG/INkz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45f580aa265ce7db7357c311dfcff65a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE