CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4a2219b4a78f26c708d7f46ae931f596_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a2219b4a78f26c708d7f46ae931f596_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a2219b4a78f26c708d7f46ae931f596_JaffaCakes118
Size
139KB
MD5
4a2219b4a78f26c708d7f46ae931f596
SHA1
71dbcb8d1557f50957e7fe1f861454c5b576d1bc
SHA256
b64d1ee54030d81ad7d25a6bef0f38c37f3feb31a2b8b09136af275bf72f4b43
SHA512
4e8e742ddfd2db14634dc276e06c316582bffda209755d9d860ea85ec10f3370189735beaf477a86631b41be1baef3c4c98de84cb76312863284c43932f7d7f2
SSDEEP
1536:MDEFUawhF/H8fOpupsFgo7EvKBW2FVtoIvppRgjm4M8e:j4D/cSJ97EiwgRvppD4M8e
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4a2219b4a78f26c708d7f46ae931f596_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE