CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5a45f35052bee7720211019b1bd6f9d6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a45f35052bee7720211019b1bd6f9d6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5a45f35052bee7720211019b1bd6f9d6_JaffaCakes118
Size
110KB
MD5
5a45f35052bee7720211019b1bd6f9d6
SHA1
8cc2548648cec5ed3fe187a60321306edebe8001
SHA256
5316af1387ad8eba098d8133e5853c7f0ba7ad5eba2dfc629bfb3017799cc26c
SHA512
9d0d0d093ade5f05554c65fdeb556744300be8a30460496c39441cd5ae77c31c0bdbc144cd34f41f79a4389c5dd8a650d38df1f511f8c15826621ea50e92542d
SSDEEP
3072:02RWdNEp4LsidqhaN5tTTKtN2kZ2dVkYccwl8cgLDRA:02RWdNEqgARrtTTKv262d6Ycci8cgLlA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5a45f35052bee7720211019b1bd6f9d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE