CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5adba18223859708349f4fed3824555d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5adba18223859708349f4fed3824555d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5adba18223859708349f4fed3824555d_JaffaCakes118
Size
127KB
MD5
5adba18223859708349f4fed3824555d
SHA1
9bf751c595935063e38a336c4c85d313d920dd64
SHA256
857bed940b858b80a434dde5730fa8c0577be574f8cd25671fbfa7c34e6fcb8f
SHA512
30fcf4ab07dfcbcd9e160f9310d6825ead40a44f6c4b5a461cb0514ce919c0058a292ce9f2f3236e3d3cf2b054a5626936330cc8334caeb421cfad1255a17bed
SSDEEP
1536:6Rw9k6k1FrHc5SlCq0pTVLI6O/zv3qicJupUfd:/cHr8xdIB73ZgupUV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5adba18223859708349f4fed3824555d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE