CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f321030e915c74b8a2d4a7c36b302db5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f321030e915c74b8a2d4a7c36b302db5_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f321030e915c74b8a2d4a7c36b302db5_JaffaCakes118
Size
105KB
MD5
f321030e915c74b8a2d4a7c36b302db5
SHA1
40368273c2a799a2d4d65d097dd1ac0ab3350ed1
SHA256
720d3d678582fb833168fcd53ebabbb04c31703a4b162477ec215cad70171959
SHA512
84fdf6ae96c6531ec784a320f8f977f95d0559ad8504f4ae41306743b41308ffd5ff9715505cbff21019380ed73f9003a8bb4721a193f2e3fcfe1e8815b64e98
SSDEEP
1536:SQclh8MIwu5+oYplRCis/uhx0hPIyBhwy4nIi0PZqKv:ahdIw/oY7RH4u8hwy4YPZqS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f321030e915c74b8a2d4a7c36b302db5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE