CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4cb7671081590b837f67a5484506b5ea_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4cb7671081590b837f67a5484506b5ea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4cb7671081590b837f67a5484506b5ea_JaffaCakes118
Size
2.1MB
MD5
4cb7671081590b837f67a5484506b5ea
SHA1
8399e4d8e3fc0b0e760118bdfb077c4aa5406c95
SHA256
3485c7fac174a9a3c8195b358d5011800bdd59a1311e8f96721cf6cfdc82f27d
SHA512
535cbd5186a0a842c0af5392a65887919e12b118dd30aa946837ea7a775df956360dfc264532524bbe07859d83c457f8f4c35b90fc01550e9349397ac07915ff
SSDEEP
3072:MxhwVft6wgfJC7fukDpbDyl1mVWyef1cqHNh0Cb:MxyVftqJIfDNDtVGf1cqHz0Cb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4cb7671081590b837f67a5484506b5ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE