CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4dd11d21838750b8b68f278e55488c48_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4dd11d21838750b8b68f278e55488c48_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4dd11d21838750b8b68f278e55488c48_JaffaCakes118
Size
124KB
MD5
4dd11d21838750b8b68f278e55488c48
SHA1
775cf66c6b689b76813bfd4ee2a54f84bf0a0563
SHA256
9df527f4764569447180d4706ea525b90039909dce0b9fbbcdb09f70eb62a838
SHA512
9becf64e4a9eb8c58b95fcae40e2955b8b255c896272df4e5efeb1fbf751c45a1a1c109ea514d0d78778acaba8c3fb4ff18ae50691ac82a8964967c11a3d4211
SSDEEP
3072:x/2Y84Cf9FmfXxBJwSbTFWouJ5HLo5ntzXvvh7g:p8bFmp0yWouPHchtbvh7g
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4dd11d21838750b8b68f278e55488c48_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE