CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5e13d02c9a6db63f66b1f679de753b8f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e13d02c9a6db63f66b1f679de753b8f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e13d02c9a6db63f66b1f679de753b8f_JaffaCakes118
Size
105KB
MD5
5e13d02c9a6db63f66b1f679de753b8f
SHA1
9906debd44a254b4ad85284894021f3dbb9f0cca
SHA256
ef31aa2b5cbe68d3b10bab3ee59e6aa3197e4e8bfe5784870c8eb0a0f587374e
SHA512
546f439616d33c1b48392fdc71e72bcacd30d8f2c3ea7c9d94efa0afee8830baef3d2a715ec84be97c7821cea98fd98e729a3334093767cce20d02549f3f02d8
SSDEEP
3072:LmFty1L8gDyOU2yCDJlKZX+QBsnIHU34LoDwWtT:LUty1FynC3PQm3aoD7x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5e13d02c9a6db63f66b1f679de753b8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE