CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4907935018b77a7c1ad9249c5b4098ec_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4907935018b77a7c1ad9249c5b4098ec_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4907935018b77a7c1ad9249c5b4098ec_JaffaCakes118
Size
83KB
MD5
4907935018b77a7c1ad9249c5b4098ec
SHA1
73b709e3d26f3da5e6013428636b8bbe568630ee
SHA256
8a723c58a83abc01c5d2bd280a9b876ec80a26129f8924b8a674050750f51d56
SHA512
ee964a6d4b9df9d919f28eb3650c8015e773f9a8bfedb840b509cc0cf6032ba39d5441dcc93484acadddfd4d07822e6f6fb9a5eedba2cb5c9b62114ff6470cf5
SSDEEP
1536:SM9jsxvhBfnbJbwtz674ERfecMHGuVzkZmL97whQ:3jsxvxyx8NMHGuQmVeQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4907935018b77a7c1ad9249c5b4098ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE