CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5be5c0f67edf9acf5308891ef195ab8e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5be5c0f67edf9acf5308891ef195ab8e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5be5c0f67edf9acf5308891ef195ab8e_JaffaCakes118
Size
87KB
MD5
5be5c0f67edf9acf5308891ef195ab8e
SHA1
9aad235046bac97a4f458d83451c3dcbe0278d77
SHA256
59c56a96bb28934026f9f87a471efed8d529b09389366b3c9b8a6acc20a4f60d
SHA512
22c50ace5e88a611374d3c2cb9c9b28ec14ed8d32365f4acb04dde83253c5784fd632b835452dd566b184164b4010d863a7adc5280256410ee5c93081fa055d8
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvu+YUbrtc3VusFRVfa552N:6SFMDgVswFLdNJYUHtc3YURVC552
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5be5c0f67edf9acf5308891ef195ab8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE