CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5ea692339629de1d734ebd561b7b17cb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ea692339629de1d734ebd561b7b17cb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ea692339629de1d734ebd561b7b17cb_JaffaCakes118
Size
129KB
MD5
5ea692339629de1d734ebd561b7b17cb
SHA1
6b02a3652064aa409558ff44a26c471fd28e63f3
SHA256
c569ec97bec3104f05a41e4d5f3c8dcb4dca89acd1ecca01cf7926d879e1e806
SHA512
a09f606ca310d04513c1e84110658274855cc4a516506320cefad4000ca6603006b546cf2d81d9572c13eecf817bdbb74d2bd7560cadf727aacf5d7d3a33e509
SSDEEP
1536:AHEkUaLBF/H8XEb6F98l0VL8RS/eq+QoJ:vEj/cXEIm48QmXJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ea692339629de1d734ebd561b7b17cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE