CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5ecfff31f0ca1dd361ba3761af59cacb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ecfff31f0ca1dd361ba3761af59cacb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ecfff31f0ca1dd361ba3761af59cacb_JaffaCakes118
Size
105KB
MD5
5ecfff31f0ca1dd361ba3761af59cacb
SHA1
bd1a7e462bde06fda9c0e429f5767c0fcdf93880
SHA256
042ed6e260323da0fdc6353659812ee98b0bac58e60fbe37184915e85718e8f9
SHA512
117c8f0c2779f48c7a5f30a8121271a8a7a1a79b43308b497fcc1af2a490615364bdcae106f75c6cfc43fca50aa2eca4123c416be08aed86342b60b930aac247
SSDEEP
3072:iEoHek1z7P7fEKLlLjQyqd+xhDVracWLp+i0Am5zsZFG:iEsekJP7fDLjdqd4racs4i0zL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ecfff31f0ca1dd361ba3761af59cacb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE