CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4cad13b0705f427370c245a4fe715f9f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cad13b0705f427370c245a4fe715f9f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
4cad13b0705f427370c245a4fe715f9f_JaffaCakes118
Size
134KB
MD5
4cad13b0705f427370c245a4fe715f9f
SHA1
b871eefbcfb00fee3fe4c9a5fbd4ebc04b8f1a92
SHA256
16f98e60dad21b53b5b65e55fb55ef78769985f497c4f0806e9308cb7f7da7a4
SHA512
8b05dca59f705711014978e3caffd5441567cb0d763a0244f053b3210558d5e183820427e3e1d71b786f26f2a4d7956354b00eab33ae4a9f9d54f536a5fec2df
SSDEEP
1536:AHEkUaLBF/H8XEWhb7/RyU54L65oubrq4TOM3/23apKemH5H:vEj/cXEWhb7/RyU54LkO4KMPQaBsB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4cad13b0705f427370c245a4fe715f9f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE