CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f19f1178057803e030991abd775780a7_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f19f1178057803e030991abd775780a7_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f19f1178057803e030991abd775780a7_JaffaCakes118
Size
101KB
MD5
f19f1178057803e030991abd775780a7
SHA1
661a36b7cc1051f39d7676f5164aa5d410f42a4e
SHA256
0651b82059ea3106759ddc34bf3852dfcf3cf6d6465bca4ac32597d41b6365a7
SHA512
d86395b16e922e0956e0ce4b87fc15c3a4ddb33645b05981443ac546c4cb9169711b3029d7effe31193e4d08db1ff99e8d67264a6e89c08c8547d45165a14763
SSDEEP
3072:0OtFNv/r7r0RljBS01TZZz4VkRqV/O4j56f:0Otbj7EljB51T7z4Oqmp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f19f1178057803e030991abd775780a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE