CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4aa6bbc5d6bd61779694f6174ef94c6a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4aa6bbc5d6bd61779694f6174ef94c6a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4aa6bbc5d6bd61779694f6174ef94c6a_JaffaCakes118
Size
106KB
MD5
4aa6bbc5d6bd61779694f6174ef94c6a
SHA1
3b44da191350d6b9e59033378cd476293b9318db
SHA256
23f0d0387b20ae8a8a36b18786e8ef941dfeab856e6ca28d502f61d7ce8452f5
SHA512
73909c26163d36cca96d5b0f4fc77094421b47ad78a374293eab0f3fef6336b34da4a1c0974f35e93a0fd8a9f0d3bb68dea34e96c7a19cfd027bb1451741916b
SSDEEP
3072:x/2Y84CCtIFRpb/U8q9utlHeXEYVXjcS9P:p84tIFRqX98lHmEYVTciP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4aa6bbc5d6bd61779694f6174ef94c6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE