CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1a27c8fbfac6e3c3f2d7e03b0b1e073e_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a27c8fbfac6e3c3f2d7e03b0b1e073e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a27c8fbfac6e3c3f2d7e03b0b1e073e_JaffaCakes118
Size
98KB
MD5
1a27c8fbfac6e3c3f2d7e03b0b1e073e
SHA1
71b04f431f24d6da8eb9b2fdbb03478cb449f596
SHA256
3d598827c6e87792b09e4dcf9910e3d14277fc61bd300b925e355a212c276962
SHA512
d149014d547dd2d345fab9410671c314ccf23cbf299cfbc0151d622068e10859dbbe1cc8598157adad2da8ffcd720d08813ce9d28349c592f0f086e99599f28d
SSDEEP
3072:Ud5W8kw/jdt9YDJyCm5IrQx8e3339nz/+k0IDH:Ud59bdt9sxuIrihjF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a27c8fbfac6e3c3f2d7e03b0b1e073e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE