CancelDll
LoadDll
Behavioral task
behavioral1
Sample
22d0e5f97b60889dfac96fd9934581f0_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22d0e5f97b60889dfac96fd9934581f0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
22d0e5f97b60889dfac96fd9934581f0_JaffaCakes118
Size
90KB
MD5
22d0e5f97b60889dfac96fd9934581f0
SHA1
78e9c7332467e775c9375db7843052470cc44c89
SHA256
36b365ac06260b081f372f4625b162d28f1e237ad1c7ee1f5b6060a019b59b6f
SHA512
e415602ec74a92c083ae7b03a63695028e94ed025d608db68eb4516d613d9ef40d7010a12e6a480204e7ae4091e9e5bca55b1dec8706b44a60bd1031763a7968
SSDEEP
1536:LmSQNbJE1vj8gDxkOuHWwG00d75TE8FkrjthTAIvzTAU1E:LmFty1L8gDyOuHWwG00d75o8kFhTAIvO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
22d0e5f97b60889dfac96fd9934581f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE