CancelDll
LoadDll
Behavioral task
behavioral1
Sample
09d6bd6bd551fc8e8ba0962cef574787_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09d6bd6bd551fc8e8ba0962cef574787_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
09d6bd6bd551fc8e8ba0962cef574787_JaffaCakes118
Size
131KB
MD5
09d6bd6bd551fc8e8ba0962cef574787
SHA1
e73a896db6895491f2ba2b99d2d7ae31f4996e47
SHA256
f2dc6939df26001564f87e4e46f5a769aee6f5aafa05d70fe7a84333b145250f
SHA512
3a34add395392efc79bf8a3ebf8798d993d403ae1099203dd07f2a0500c1cf8d45ce7b3181899669c4fc24fe4c2c962b923d815965bf1dec7c24c7739afd6ee9
SSDEEP
1536:MDEFUawhF/H8fOs70bhZAo5s3TbHZR8WoL601wHa86JB:j4D/cXwbK3nU/L6014WJB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09d6bd6bd551fc8e8ba0962cef574787_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE