CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5b80c24ed5084f1e2e7053451c119292_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b80c24ed5084f1e2e7053451c119292_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b80c24ed5084f1e2e7053451c119292_JaffaCakes118
Size
104KB
MD5
5b80c24ed5084f1e2e7053451c119292
SHA1
846c49c8314adb9ea3817dedc254d81a023f6a69
SHA256
93fceb51d637a15dab60ec0c870edb23fc5ea7b761503d11c384dd2b918f8d37
SHA512
567836d9ef4c1a6b3d9a8df5284e821b5d1d22b5129322b69c2a5ad732a8fea8ea3141e9b66bae9b22e1667bae173096a4dfdb5189ed6f4eecf8bc68a2a0e82b
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjDZDuyu3wusy6lzXXKA4118f6b8Z79TFI4hktKpMab8/:7RCVcAHzYRjDfEwTlX5cRuwV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5b80c24ed5084f1e2e7053451c119292_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE