CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4d39c20278d1a6b15785ba87a9210dae_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d39c20278d1a6b15785ba87a9210dae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d39c20278d1a6b15785ba87a9210dae_JaffaCakes118
Size
107KB
MD5
4d39c20278d1a6b15785ba87a9210dae
SHA1
d4970da5796cd90dfb06fcb10ae0365d37b29aa7
SHA256
cde8e5c4b1ee9924ed974e5823fe95e1f3ed1f2c33f7e37c1a0291d79ce6c685
SHA512
bae9a5d312a418ab565931d8ab0840c4ba0d22798560da00363a7e3275e7e5e6e20ba4a07cd1020fb63dbc5416658439933d68babb2f09356ce48644bf6900ac
SSDEEP
1536:7rOUbmJ/ZS8DDfkFCweFiTpHylpD7J8DXqDXmJyNMa+mxwdt8Z31:FbmhoODfuCw6iNyDvJwqbyyNMharZ31
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d39c20278d1a6b15785ba87a9210dae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE