CancelDll
LoadDll
Behavioral task
behavioral1
Sample
263b26ebb98012c376c2102a606464f2_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
263b26ebb98012c376c2102a606464f2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
263b26ebb98012c376c2102a606464f2_JaffaCakes118
Size
132KB
MD5
263b26ebb98012c376c2102a606464f2
SHA1
4451a904e388e54bb04d2bad102addee96827787
SHA256
4600e6e253480e403c5dd09101b0e4913c6b8ad67e39dbcb817f5b28faf8dce9
SHA512
fadcfbe93c0636ae7d1539a794cbaf2f8a44ef0284a0cb2a057aeed7cc18c3e6f5649b770992d694ecae4b89a25bd817d9f3a87cb647cd53595c339ce584e363
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqYkKeEZ4L6DJ6SLOE5lF1lri9xyaiJBbIqu7Yj:l9L1xm6hpbVcxKeEZnIE5Dea+zYb5t
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
263b26ebb98012c376c2102a606464f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE