CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4df701067ae84442d4e7e964c683d092_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4df701067ae84442d4e7e964c683d092_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4df701067ae84442d4e7e964c683d092_JaffaCakes118
Size
108KB
MD5
4df701067ae84442d4e7e964c683d092
SHA1
63445b75c546de9fbf819034787d7137683637c0
SHA256
6dca08c95f69fa7d31322703033167d042e5ed867e88289f60140297f18aff00
SHA512
05412911bd52828b408fad53f9ac77d42cb17477d47c6a7b0c930d4105f2b20dcded156ed141b2c7a6f9b9d54d14bbca78c8f32adff2ab45bcd832fbe0b3d276
SSDEEP
1536:4G31s6OxArk6ytVNWaRUjLqBWCxklF+uKMGVZacOJ4mLEfxP/Knh:B3wxV33r7WCGlFKFn3OJ4m+xPynh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4df701067ae84442d4e7e964c683d092_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE