CancelDll
LoadDll
Behavioral task
behavioral1
Sample
620cedac4758c5d119d32564a3e34014_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
620cedac4758c5d119d32564a3e34014_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
620cedac4758c5d119d32564a3e34014_JaffaCakes118
Size
75KB
MD5
620cedac4758c5d119d32564a3e34014
SHA1
b501c8ed190ba32efaf56e720713ef2b8c10d3c3
SHA256
6628b56478b66912f340ff24379964c4118b28338b4be4f8aa498fbf511420b0
SHA512
0b48e17b96def467c78a08edfa9c9f5db460e38124830d061fad5c7e3dc18624385c6e7b07b22a4de37d7cf8dfd49d0391297451d525eb4988e08f8e0cd592ae
SSDEEP
1536:LmSQNbJE1vj8gDxkOSG6vu7ENH9tZRRPhAR3y/iKf5:LmFty1L8gDyOSEiH9tkR3yb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
620cedac4758c5d119d32564a3e34014_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE