CancelDll
LoadDll
Behavioral task
behavioral1
Sample
248b03355850463d4c658c960e9c8fab_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
248b03355850463d4c658c960e9c8fab_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
248b03355850463d4c658c960e9c8fab_JaffaCakes118
Size
95KB
MD5
248b03355850463d4c658c960e9c8fab
SHA1
fcbe25f83f5d035de2da8dee9491fe828d8a7429
SHA256
dfad968e057b459039179c3374369df073c23e005fbe65d316f8f809ae580358
SHA512
5fc55ebe6ffd5a02a9405045e278e98604010f33c0df4d5cc6104f3385301306ee523917c3fd7cb19d4ec07658ff34fa33fc345264d168334e9db83106e4c09e
SSDEEP
1536:i64W3b/+sHTUxLutpvxB7/IVHsSXJ8Kv5EWpZmhmw8ESx0noYqLu:1b/+sH7ZB7/uJ8KBEDhCES1R6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
248b03355850463d4c658c960e9c8fab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE