CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4b22549c12d3664526f04b7058a51e42_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b22549c12d3664526f04b7058a51e42_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b22549c12d3664526f04b7058a51e42_JaffaCakes118
Size
106KB
MD5
4b22549c12d3664526f04b7058a51e42
SHA1
c7f34394587df70259dd517106ddb445f0c8be6c
SHA256
85ebbf08a5de2fd207d7b238be6137c00d5c4f04febad6da57e36eab23e4d598
SHA512
02a584b6fe943fbd45df25f845b548239f9e0d79f264afbdf7aa9c6f86a1e4166ab0f9db6338c976a2a66c89d7525d3f15cf62b09f978ecae503866b33a3511c
SSDEEP
3072:iEoHek1z7P7fEKLe8gA1JeaZajbqMMOSZU:iEsekJP7fwrYeaZKbqbOSZU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4b22549c12d3664526f04b7058a51e42_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE