CancelDll
LoadDll
Behavioral task
behavioral1
Sample
610d7b0fc9be8b79fe2930621fd6ee6a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
610d7b0fc9be8b79fe2930621fd6ee6a_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
610d7b0fc9be8b79fe2930621fd6ee6a_JaffaCakes118
Size
103KB
MD5
610d7b0fc9be8b79fe2930621fd6ee6a
SHA1
49abb920d66116f4ba2f5931a44b06bfcf62e935
SHA256
c6e11417010455738a6464a1f55c27ed11723e057fb8fd84d5bef882c0c19f59
SHA512
5d0b6f73e8808ea929bca339419d99f6826d83485da023e31c04237049ca38b2be99ef4ca1036016766163bf28a266f8aac3f4688a92dd3438b5e34e0fb448d0
SSDEEP
1536:SQclh8MIwu5+oYHOa6SfD1sBOA7Qtwuxx1CdJaJlJqdoKOHajJVC:ahdIw/oYua6SrYLkz0KJqCKCajJVC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
610d7b0fc9be8b79fe2930621fd6ee6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE