CancelDll
LoadDll
Behavioral task
behavioral1
Sample
29dfc735df4bdaf1f47770a793095eea_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29dfc735df4bdaf1f47770a793095eea_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29dfc735df4bdaf1f47770a793095eea_JaffaCakes118
Size
92KB
MD5
29dfc735df4bdaf1f47770a793095eea
SHA1
645e7f3e1e227d68e91ada74d54fe7487cb4d124
SHA256
f37e342170ed6d1a6ea5170636b62f4e5d5ecb558e053a19cf777bf899269c6b
SHA512
af73b8641b6f0b40f45702e4b174404e00f4a04bda3f3c4720036c6064423ac1566e0a5b4ca0d687a297c924c5746710a1ac774949b525fc4fbc01e2d979abed
SSDEEP
1536:Gtbad8oQmjBhVNiHseELY+YBREH+CnWePCMnbzzCl3QUit3qim:maSMBhVNgENYBKFPJzCl3Qvt3G
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29dfc735df4bdaf1f47770a793095eea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE