CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f18d7f43cd8816ea5049c9e5c30984cf_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f18d7f43cd8816ea5049c9e5c30984cf_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f18d7f43cd8816ea5049c9e5c30984cf_JaffaCakes118
Size
98KB
MD5
f18d7f43cd8816ea5049c9e5c30984cf
SHA1
410927191e653e906f64f7735c646914657dd756
SHA256
b6c688b0d2b76784d04791a74a8403d94f579058c2b8d77c54b22969bcc3578e
SHA512
03c829c8c2b8928a4db5be78f55921c714197daeaa14428fa029c4243b6791c6b8a3cdf9df23f5f9a765326263c40a57ee837370492192550a611d30d3bc37ec
SSDEEP
1536:SAVJ0mWeB/iU9Hx9tJmudhhryijpkOjtRtD2aYl0G9zlSlpy:zJ0mW8/iOx9t8iHyqi+t1YOG9Qy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f18d7f43cd8816ea5049c9e5c30984cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE