CancelDll
LoadDll
Behavioral task
behavioral1
Sample
26f37b3d5fbfae88a4949fced5cb66db_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26f37b3d5fbfae88a4949fced5cb66db_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
26f37b3d5fbfae88a4949fced5cb66db_JaffaCakes118
Size
108KB
MD5
26f37b3d5fbfae88a4949fced5cb66db
SHA1
b31854f949b1ff7047503004b1c60ddc440d5de4
SHA256
129102bd1a72ad9a94fdaf666db7fd1fc97a9f099b86940d3e1a80909a4fda8a
SHA512
ccb75dd2a6519e8d4d82a36f47c7d2108a5102667ac655d80a14e065f78b570acf4e4099059c4d002db0c2ebd7c1a0f702715d1b717287863c891b7f8dc0692a
SSDEEP
1536:xNWujxA5EY8DwKtcQ6VGqAQ+8MaG/DlHlfUOk74FnRQcWcar97LcjGs3bnYoh:u/2Y80y2VZAQ+8MP/D6ch8FZLQGs3bnN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26f37b3d5fbfae88a4949fced5cb66db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE