CancelDll
LoadDll
Behavioral task
behavioral1
Sample
64349938d98a0a8b44dd8932642ce27e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64349938d98a0a8b44dd8932642ce27e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64349938d98a0a8b44dd8932642ce27e_JaffaCakes118
Size
104KB
MD5
64349938d98a0a8b44dd8932642ce27e
SHA1
11af4b75d57bcb1e171d82a52a72fd2e395f82ae
SHA256
e17118faafc322fcfb9b5624895723efd2bfbc8c3c3c6ad28d8cc8983299f4ea
SHA512
dc40f8a49000ce19c94d1a5c687807056a42c25208bbe104981d4abfefeb99ce137e3e335f88ee6f8ae7c34b430386c8be17479bab24afca3714ba041fc67328
SSDEEP
1536:zMHSIHT9yM8vKORWFm8Cy3BJwOWmN1A7IbXREBEUMTDcz1uSmyLen+cU:z1QT0hvKORCCYziGq7IbBZlP41VFenc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64349938d98a0a8b44dd8932642ce27e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE