CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5d8e78dad4d4db526910ac22833357f9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d8e78dad4d4db526910ac22833357f9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d8e78dad4d4db526910ac22833357f9_JaffaCakes118
Size
76KB
MD5
5d8e78dad4d4db526910ac22833357f9
SHA1
56105e4bdb86665f46a72363da22908a1c32dadf
SHA256
3ae4f3c4a7446b0e66855026fbac605083212c074a4483f581c4d818f58ef9a1
SHA512
b6e8c5bd228bd72895b32db29dca1c25fcbb3e781c6765cf02e13ed44072d24f8f412b3e27d50cab8947e93db89dbef1ad3a2ef8d731993f338cdf838c1531c1
SSDEEP
1536:DjMKODJPutB+69AmJAUTjR9ON1rE8+sFlQAvVk:+MBpAmJfaN1r9+sFekVk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d8e78dad4d4db526910ac22833357f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE