CancelDll
LoadDll
Behavioral task
behavioral1
Sample
154c362668dd5ccccec837cc8c7d3dfa_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
154c362668dd5ccccec837cc8c7d3dfa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
154c362668dd5ccccec837cc8c7d3dfa_JaffaCakes118
Size
131KB
MD5
154c362668dd5ccccec837cc8c7d3dfa
SHA1
e1646557b464a629efac37768a3a841953079e73
SHA256
d477c25b28948dfafa7e7412c57e5df05ccdf012d9d38ed608769c6ea0908982
SHA512
619f7b794cf552bdb77fffa829c668b8c9402567923efd401b98ad4e0539d5deee2668f179909ba63c9e0834c1348c8385e142bc68adfd851c71e779880f2018
SSDEEP
1536:pUEkUaLBLNH8DokmFRielh0X4b8Fh4xslG9m6BTw5mf:DExNcsfFMXlisImgNf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
154c362668dd5ccccec837cc8c7d3dfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE