CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2a37cad239c149bf3af3ad36ef3745da_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a37cad239c149bf3af3ad36ef3745da_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a37cad239c149bf3af3ad36ef3745da_JaffaCakes118
Size
117KB
MD5
2a37cad239c149bf3af3ad36ef3745da
SHA1
44a8c8700a34f98f183615dcee779477131434d4
SHA256
ac4338af8ff386dff87c5b364fa6ffc65482cb2b57d2e07edbdf76a374b1bd9d
SHA512
e0d01e1e2a6bf927dd483849041a8ae4921f8aacf163025824c9af2d3026480a5d5dabf4af790a2fa63ec1682aa6f0116fea3cf57d076ad23afec5d04c266207
SSDEEP
1536:4G31s6OxArk6ytVNWaRU5PeRK5MbAdP/SYcGhyLcgmZZ/TwVyaCdwFay34cicVMW:B3wxV33rKPOc5mcgm/EVyfwky345cm0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a37cad239c149bf3af3ad36ef3745da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE