CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5d317188f9b40c6d92be7a44a8ebe793_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d317188f9b40c6d92be7a44a8ebe793_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d317188f9b40c6d92be7a44a8ebe793_JaffaCakes118
Size
6.4MB
MD5
5d317188f9b40c6d92be7a44a8ebe793
SHA1
93f2e97f053407ef49f400f627719bf2d7cef1cd
SHA256
2be09b0f0f3975284ce42bf54cacd40e0dfa8e03f3201b16bf1bb39bc76c7459
SHA512
2a56d230ad1fab215443ff64102268feaebe93110a58caa9831e87d0bd9e520c255d5e0b249763d09999a493b1d454f9cd8b6e68db3152483f181540e625264a
SSDEEP
1536:HMcOCrgsYOou8D1Cl9oo24k5ezbsS0sadYEGBCsomc2iaV9:scOCUsYOoNE9oo2xkzh0sOYJxzV9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d317188f9b40c6d92be7a44a8ebe793_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE