CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4dd9ded85bd530256033b7f326512f7e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4dd9ded85bd530256033b7f326512f7e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4dd9ded85bd530256033b7f326512f7e_JaffaCakes118
Size
112KB
MD5
4dd9ded85bd530256033b7f326512f7e
SHA1
efa1f9a30d0621bad6faf9102804709a588ca04f
SHA256
3d6f63b1a35f3a8c685a3b1c459916327a47331df98e98106032a2540fb46145
SHA512
e86d35609fc3af347ac406414b0f5ca1a10fde379df4e66166306c58939786ba27d02fd19379e1126896f6a701f8c7d375a5511c4bed892cddc0ce42e8f799cb
SSDEEP
1536:EdcuthxJkq4sV4u25r95Cdx+CmdJX9ppvlvA2rTA:KrOsuu25r9cdxxmL9ppdBXA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4dd9ded85bd530256033b7f326512f7e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE