CancelDll
LoadDll
Behavioral task
behavioral1
Sample
19b700d471ddf55b173bc2b6faf015e8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19b700d471ddf55b173bc2b6faf015e8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19b700d471ddf55b173bc2b6faf015e8_JaffaCakes118
Size
91KB
MD5
19b700d471ddf55b173bc2b6faf015e8
SHA1
002056a62420f7310b50820f4f688443ac432082
SHA256
8bea068cd4eb1ff2c1abae78b3e9775d08992e94916649e388e1f70d930b73ff
SHA512
83b68f2bfb4bede308d5266ac8f010773f8a216d334607cda26ccbbde99909fac48adb750e95a6dd4d5dc54ebeb6ed2099d3eb40a60e42003f2c3b1cb6d2b318
SSDEEP
1536:lmoLIIWdNE9jv4LsFgIgUBlxg91mN0rnTwvph79Cur:02RWdNEp4LsiSl2J2l9CU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
19b700d471ddf55b173bc2b6faf015e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE