CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5d64c229e986beb04fb38aae06ba3b82_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d64c229e986beb04fb38aae06ba3b82_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d64c229e986beb04fb38aae06ba3b82_JaffaCakes118
Size
101KB
MD5
5d64c229e986beb04fb38aae06ba3b82
SHA1
46b80f5b6b71739db56c45d937db0fafca1750eb
SHA256
91aca134706aca60cfb7ca67a3b18419dba42c16bcf5ed3678db169670b7bfe6
SHA512
cdf20e142d4fb076d1bd2b40b974ff8ee649d94ecfbdb115069ec2a3dec5a3c5a0ce7f72557cae94e28d25990c314e4364ababba65eaad73cbb92a4b31e85a40
SSDEEP
3072:pymhYhCqgNzpjgtVmV4YwzmpLnRymDP5a6Y6MVMifX:p/hYhEOmV4YwzgnRy2PEiSX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d64c229e986beb04fb38aae06ba3b82_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE