CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0fd99f38ea575859fd69a19f6b39564f_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0fd99f38ea575859fd69a19f6b39564f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0fd99f38ea575859fd69a19f6b39564f_JaffaCakes118
Size
149KB
MD5
0fd99f38ea575859fd69a19f6b39564f
SHA1
db82fcc87873d2d220750ae1e8a81c36bdefa316
SHA256
9596a75234ef6c6be8b19246755857d17d0cb63361c08978b5031aed52f43954
SHA512
64ae62d74f91841b8d7cbb9e2e2a9af03b0a681d4ebd47d8f54bf820065560b644cb29569a0bf5e8e9a6970aeb085233718c23394166f8fe729958e51cacf1ae
SSDEEP
1536:MDEFUawhF/H8fOSkxkjAVzkf+Xcw321NnpGVSg0QAiYSKUYl7bfxZPZyK725uCj:j4D/cvAVzGmdsncVSxriYRfJZteD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0fd99f38ea575859fd69a19f6b39564f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE