CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4b3d3218fed1615ffb322585b6704629_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b3d3218fed1615ffb322585b6704629_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b3d3218fed1615ffb322585b6704629_JaffaCakes118
Size
6.4MB
MD5
4b3d3218fed1615ffb322585b6704629
SHA1
e5dbcd43f38f98bf230588987c78fbf797c059c8
SHA256
1105650df4e3b07958586ab6f1aca95a0c0452f8b9b15814f3aab73d5e20f520
SHA512
f3203a2b13f30ac987986939c68133e0e800d5eb96e5959e40158510499db3392cf5f6f301f7cf24b08ff31fc13128783e8a28c32e0ed240d371c8a04ae85b9a
SSDEEP
1536:DAPLmf+QNHKpoynfChTKpaV1gM7m7tSqi5uR9IqNyChOpVN:sPLWZNHKpRCV1gMK7kUBvGN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4b3d3218fed1615ffb322585b6704629_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE