CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4dac72a096662d552b1d697c31af5691_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4dac72a096662d552b1d697c31af5691_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4dac72a096662d552b1d697c31af5691_JaffaCakes118
Size
95KB
MD5
4dac72a096662d552b1d697c31af5691
SHA1
b9180e1c817a3751a00c26cf7037d926f17d550b
SHA256
d5d0fd2701bebf1e1e176fc9ab8143b41f39391e9cd2969400129a007d5707cf
SHA512
438b97739204ee1ac82638fa0d46094b3f11f03f2ae6a5f6cda7e56f7acd186671ee6e2dbb92a4c84a7e481c14322d9d9bd3a69c371246cbdc630cfd5fed3843
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjDrfU30TEThPrnBn/j4KqMEtprz7W13v+ejmvn7G:7RCVcAHzYRjDrf+XtTBbVbwhza1bmTG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4dac72a096662d552b1d697c31af5691_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE