CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5ef6ef2fd4c7cdcf5501b3d46bebe93a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ef6ef2fd4c7cdcf5501b3d46bebe93a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ef6ef2fd4c7cdcf5501b3d46bebe93a_JaffaCakes118
Size
130KB
MD5
5ef6ef2fd4c7cdcf5501b3d46bebe93a
SHA1
c12560f5ed9765ad671aa6fbc56f1933971ab122
SHA256
9de93b5f7bddc768dc3d51cee00686a0023f27858d72de717ed36a9470919a61
SHA512
802716278379f5adde40c0fb366972e2577efb00bcc0b6f33e7f52d8266e482a702ce87dd53349c7d9418d8b9318be846205e5aa2a4c20a6a0e79650504f218e
SSDEEP
1536:MDEFUawhF/H8fOMHTSSW220XIbTEWeDLSI/i92Eq4dIcD1Q:j4D/cXhEqmy5s2CI6+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ef6ef2fd4c7cdcf5501b3d46bebe93a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE