CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2e27b54130d39ec3093d357ea4da0769_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e27b54130d39ec3093d357ea4da0769_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e27b54130d39ec3093d357ea4da0769_JaffaCakes118
Size
104KB
MD5
2e27b54130d39ec3093d357ea4da0769
SHA1
fcbb62ee81a5d718b7c41051006d312e2393808f
SHA256
d1ca20ebfb1cb29bac4d64e30ae21b1c9f62add9b5afd5de39612bbf3cf87e3f
SHA512
a4da95d9ad2a6931dd43247626c2740053877a3b008f13287ad8b70fd8b049979a4e4b403ec9b39ec56804dcb955cd291cd390da1d005b5a677475243f231e6c
SSDEEP
1536:TpoZectu35iLnGlfahbfL/psIxiC0b7SrEIHqRyee/2EFtNmctT2V:TpoZP8ijIfaBfL/pbf0nOKUDn2V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e27b54130d39ec3093d357ea4da0769_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE