CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2744a60ea25ebdd3125daaf57d308a40_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2744a60ea25ebdd3125daaf57d308a40_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2744a60ea25ebdd3125daaf57d308a40_JaffaCakes118
Size
132KB
MD5
2744a60ea25ebdd3125daaf57d308a40
SHA1
e5339efc4c630b72ecd32020f01880e7da648809
SHA256
f119d6481ed943c72015923623d3a62e38136479bb5c33846a41470dbb5b62e3
SHA512
1226d18f0285f45e53ce09b66842ea2b73537a7737e768f17038aed348811fe860ec726442e8add2adda3c8d5384afc2a4ac83207e3b83d9c9bf48c3bca4e599
SSDEEP
3072:l9L1xm6hpbVcMJPE7fdSazdxkP2DQoJoH:hnhppPJPEoUdzJoH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2744a60ea25ebdd3125daaf57d308a40_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE