CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4d9b8d04edd69b87c20eb7b1bc1774fb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d9b8d04edd69b87c20eb7b1bc1774fb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d9b8d04edd69b87c20eb7b1bc1774fb_JaffaCakes118
Size
86KB
MD5
4d9b8d04edd69b87c20eb7b1bc1774fb
SHA1
10ca153165b9f86e4fe151b7cc410a87d8a93a61
SHA256
fb4b54ecc443924f029959619db7dd0437b4513e012bc8068a30cffb498613e5
SHA512
e0d64756999e433d7e40c6abd345072fdf8b83529acfccfd0ed28026a68cec6a3506bdc7bcb68d9a98468ff0d727c69dcb84555c76e845d3994e3d472950545b
SSDEEP
1536:j/7tY+plsUPpUb+ZLU0/Fw4XrqKe/i1RxlDsFHGX:jDW+plsUwoLU0t5X+Kmi1eFHGX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d9b8d04edd69b87c20eb7b1bc1774fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE