CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5c81f3557348e1ef39e720c2521d1353_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c81f3557348e1ef39e720c2521d1353_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
5c81f3557348e1ef39e720c2521d1353_JaffaCakes118
Size
136KB
MD5
5c81f3557348e1ef39e720c2521d1353
SHA1
5947fa1ff8c0b865806a08daa902741ff8c0eabf
SHA256
1b097f0845ff53315067a1bdac51831ca255c6df419b439800933f53bc116e05
SHA512
32a91050a1fcc11678ca0200af5ff7ecbd2865383a5ffa020d29c6adeb4b9cf7a48cab5fbe20e8f6438165906ea31903dde9194adf4171751572984e4b52579a
SSDEEP
1536:AHEkUaLBF/H8XE6+M2emSft2JIBm1hUAPdWNL4nBU7JzZxv9rg:vEj/cXEjeJft2JIoawWNEBU7JzZxVrg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5c81f3557348e1ef39e720c2521d1353_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE