CancelDll
LoadDll
Behavioral task
behavioral1
Sample
63a06460c25d834b3711818f6545d3d4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63a06460c25d834b3711818f6545d3d4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
63a06460c25d834b3711818f6545d3d4_JaffaCakes118
Size
91KB
MD5
63a06460c25d834b3711818f6545d3d4
SHA1
e8e3f2c95fd5c4b466193e439ccc61f879815e7e
SHA256
0fcb153c6b76dc048d4f31fc0c6150b73890d4bc5462fb7d1bceaaef973978eb
SHA512
912c7b27b346b021c1298e4d2dda80f33dd36bb4acf17739b88433aa6f9817e7dde673810f7a65c1480d5178087a61ac99a8553458036b3085bab07ab0e6c3f8
SSDEEP
1536:6MG5swHfatiJPRuD15aZxo9oJ7Mj6/qbEF5HfOtVS0n3j5uDC:XEHfOiJpI1qxo9AMueEIVfn3jYDC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63a06460c25d834b3711818f6545d3d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE