CancelDll
LoadDll
Behavioral task
behavioral1
Sample
15dfaf92dac5e2f913a386af67d35f54_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
15dfaf92dac5e2f913a386af67d35f54_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
15dfaf92dac5e2f913a386af67d35f54_JaffaCakes118
Size
95KB
MD5
15dfaf92dac5e2f913a386af67d35f54
SHA1
38cd6a3c03a3e71d713995f435156b1a789693d0
SHA256
4fae0e4f34da039f1b21647cefab3f6f11ce9a2b23796c4b797c9690f00274ca
SHA512
7b04d1198af319be423e328e00e4e55f48b2a9a58e1a638af31e5b4c082750b559adafaba380f55ac09eb2e9fc4cd4225bc9c8ae95db74900ce3f4251fcff042
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvutnBjMOEHT6DkVUAADBFDrsMW4R5:6SFMDgVswFLdNKFMOHk+DBFDJ5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15dfaf92dac5e2f913a386af67d35f54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE