CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f7338c37f581955a367dfe4a625bc815_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f7338c37f581955a367dfe4a625bc815_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f7338c37f581955a367dfe4a625bc815_JaffaCakes118
Size
131KB
MD5
f7338c37f581955a367dfe4a625bc815
SHA1
4e9a9c49fefa7c4c3b9ddc3b5a7df745dd9b1d47
SHA256
db32369556e7b574ee63a5d14c60fa489f7f94e66d9726cff963253a7308d70a
SHA512
77281e60690ec7f13e14b49a991f52d61bb2aa85efbe0cb121aad0e1e958a97cd4e9a7efad2b96f85406826b84593d348669ffc0fabaf02091b8f8fe8232e2aa
SSDEEP
1536:MDEFUawhF/H8fO/VswLL9w0yTM3SI5oRhDDcq7PyPtvk:j4D/cKswLL9fy1I5oRl6Ptc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f7338c37f581955a367dfe4a625bc815_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE