CancelDll
LoadDll
Behavioral task
behavioral1
Sample
092cdd6113565b88c807abbaf3974087_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
092cdd6113565b88c807abbaf3974087_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
092cdd6113565b88c807abbaf3974087_JaffaCakes118
Size
92KB
MD5
092cdd6113565b88c807abbaf3974087
SHA1
ec7af67bf088ad40307c5ebbcd6ef9a7653f2fc1
SHA256
997cc17bc3a19d92472ae8d23cb9070bdd2aa2841e1304c386e9014ead16bffc
SHA512
fffd45988706d9de00a114c6d668fcfd6ff66138d788520519bfd0d96dc4c417764c9270e1c4fa622a1d9b3bfb9ca15d1640d704e4563893e7b55a57e5d2e018
SSDEEP
1536:/xLK2OReR3CHmIxEDtQKezglyj654pyp0SAuIQK+/op:ZVOReRyHXmD2KezHj6WpDEbop
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
092cdd6113565b88c807abbaf3974087_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE