CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5e94634a9265233302a2ba1ae82ab4fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e94634a9265233302a2ba1ae82ab4fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e94634a9265233302a2ba1ae82ab4fc_JaffaCakes118
Size
114KB
MD5
5e94634a9265233302a2ba1ae82ab4fc
SHA1
b3dee7a1f141aa21a9a2d35efaaaee44e7fa7149
SHA256
d1ee6dd841e0d6bc2f8c9cdcb045290175773a9cdc33f52d749b5b1ee8ca99f8
SHA512
a909798f650371010bef05b7b8e13b3b6b7c78b8d36d0a8bb97b3ef94cb647085ec79bbdeab73fc45a3f6dbfabf45ac4e66e4628199cbfdb725cc8b16a6a5308
SSDEEP
1536:4G31s6OxArk6ytVNWaRU606EZSLFtDuSi4nDKMQRSCXYlDWbPXPXNVVi5fy:B3wxV33rlFEc+4DK7RS9WzXPsA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5e94634a9265233302a2ba1ae82ab4fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE