CancelDll
LoadDll
Behavioral task
behavioral1
Sample
28470f21a1ee3ea62e2fcc3780b3a517_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28470f21a1ee3ea62e2fcc3780b3a517_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28470f21a1ee3ea62e2fcc3780b3a517_JaffaCakes118
Size
92KB
MD5
28470f21a1ee3ea62e2fcc3780b3a517
SHA1
ad8ab4014cb7cb227e12eed623315320f669e189
SHA256
4b66259bac70d1e3427561923972f8d8979466b5506fa1b68032f4343935620e
SHA512
92f1cf70f3f2c71d504d8b623897c86b1275683abb977d6502c69b2e69c1989bd80a475d070d99dd5c655d60f172e9325beaaec16057c9206fc25d9a2f093c04
SSDEEP
1536:qWNTI2j7IGPmy5guIRpTj7XeF31PSu+amPZKn4MebxuUEVer:qWNTHTey5HCIlZ3Rheb8ULr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28470f21a1ee3ea62e2fcc3780b3a517_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE