CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4dce1d307fb676761a32d9ee3cdb5528_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4dce1d307fb676761a32d9ee3cdb5528_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4dce1d307fb676761a32d9ee3cdb5528_JaffaCakes118
Size
94KB
MD5
4dce1d307fb676761a32d9ee3cdb5528
SHA1
0c8bdd6bf7110bf1ae4e488cdd8d0367443467ff
SHA256
b48d452a47b6d568fb25f6b2aa9423f3f31f8f11326ebae84614684d55ba4530
SHA512
6dbf990c5c8666880c864fccbd1cbd59f1068bd1196170c9aa0319b1538f227eb344220e44c303706ae283c8021d5d0cffc7822a28c95992a02d1cc96e024b6e
SSDEEP
1536:/xLK2OReR3CHT/m7cXXZ8Q7ON5tsuVO/qP6OAN2:ZVOReRyHT/nXXZ57OC42qx/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4dce1d307fb676761a32d9ee3cdb5528_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE