CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4860aecff5ded657e6e811d1fac82bcd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4860aecff5ded657e6e811d1fac82bcd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4860aecff5ded657e6e811d1fac82bcd_JaffaCakes118
Size
92KB
MD5
4860aecff5ded657e6e811d1fac82bcd
SHA1
4677911f3a6a3dca64247118adb5211b1de1e4c0
SHA256
7876970224c8cf35774a9e09eac89e3b443d49d686262df43c9fd9063db1fb66
SHA512
acd467f2a56b69d0bb85b434421c7076ded36706fe818582ec7220e5d4bccb8b88bc00d4c0b8c029eaca19331d6bf404bca811f140281e0121333a84f1f2fce2
SSDEEP
1536:SM9jsxvhBfnQiESy8nEE26MIDexWFlh3dFlUWZDj7n:3jsxvTEXBPJIyxWFPNfh9j7n
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4860aecff5ded657e6e811d1fac82bcd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE