CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5dd9aa3941b9c37a3986eb8499eabff6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5dd9aa3941b9c37a3986eb8499eabff6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dd9aa3941b9c37a3986eb8499eabff6_JaffaCakes118
Size
72KB
MD5
5dd9aa3941b9c37a3986eb8499eabff6
SHA1
bd70ac3ae2bfa46d6711790fc5738c7f6051cd37
SHA256
4c80adba964e91842f8ebca6906e8703d0aa3769a9e6d3081f98566e4d74c711
SHA512
0facbc41c93fa165be217861aa4176b1f78ada8c0c6e84a4063551e7829d295da4a16e595de4fd36cc72aa2721c61a30972f65706869e1f9fad9f9c4f6ca8107
SSDEEP
1536:aI9js9B05V54qUmbDdRkNg3C4bqh0Uon4UE8t:Xjs9B6AVo+Zsn/E8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5dd9aa3941b9c37a3986eb8499eabff6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE