CancelDll
LoadDll
Behavioral task
behavioral1
Sample
212d34ee5cd0556efefb6878dad63283_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
212d34ee5cd0556efefb6878dad63283_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
212d34ee5cd0556efefb6878dad63283_JaffaCakes118
Size
99KB
MD5
212d34ee5cd0556efefb6878dad63283
SHA1
0855ec6a00edea0206e6025c9414ab4862dccd63
SHA256
7279eeea381a1b88fd0d573b1a6e0f82e26710b9e3c3c7f3f5f0d7da0645dbeb
SHA512
3ab8a10910b9a61c9e7b3186c6aafc68e2980c847c33b9524f74fbf9ce6451ba8050550aab5ba57791bc1f8a514ef0049becfaeee1b3bb022ccd05c33a58a840
SSDEEP
1536:7rOUbmJ/ZS8DDfO7fZyuUcs1VwhGiL4PuqpMccfgAxhJ4wMfg5FamQ:FbmhoODfOrZy/1VhiL47AVrulg5MmQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
212d34ee5cd0556efefb6878dad63283_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE