CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5d32bb7de661903739be6392037e267b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d32bb7de661903739be6392037e267b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d32bb7de661903739be6392037e267b_JaffaCakes118
Size
98KB
MD5
5d32bb7de661903739be6392037e267b
SHA1
678d3c5bcc58a6ea223f8d15cfb9654e54e5324a
SHA256
85a7f16d42bbfc9964877626e86a11e80107a4b5b76c6a701b58299cfa1f8e97
SHA512
1cf8fc0b771263d85ca61fabdc3be78de7b062ef1a430834220153131a91038a41a4d4a392b85a8fa25feb4ef704232024673acf604a499dfe7fc57e380bc970
SSDEEP
1536:LbfRsoNi6NO3xLc2BqG8eGzVi9YDqAkGOaJOs/eavKJLJEa:PsgO3igqG8fk99KOaJjlQNEa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d32bb7de661903739be6392037e267b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE