CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1aa6cec93ac37ac7b89377bdd1422908_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1aa6cec93ac37ac7b89377bdd1422908_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1aa6cec93ac37ac7b89377bdd1422908_JaffaCakes118
Size
121KB
MD5
1aa6cec93ac37ac7b89377bdd1422908
SHA1
3492533503e02468572cb3cc063b1ecc01e299e4
SHA256
1f8ccf01b7c085e9e0479f73e5d8e89ac4febdaf39e633312ed8dcc8e520ce0e
SHA512
7241118f8a92d28946f64e01f1839e13600bdb7c4a9f55bc39e38d6baea4651a6c2484fe9f4d847ef10585aa9b144261acba3238059f683b0b6d2710f3434f1b
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqLKyyy0kxOj3bGBeKu9To6+MkMwC9kKr4G:l9L1xm6hpbVcLKL3kxgqBeKuxovMwCbV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1aa6cec93ac37ac7b89377bdd1422908_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE