CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2cfc20b665b0c263a3758c693a972cf3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2cfc20b665b0c263a3758c693a972cf3_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2cfc20b665b0c263a3758c693a972cf3_JaffaCakes118
Size
96KB
MD5
2cfc20b665b0c263a3758c693a972cf3
SHA1
1ac9a6deb60e9857e292b347dfa45bb4d96817e7
SHA256
2d561142d66f25f670ee7dbbc147c09bab2e73db46d6724a1d77dda166ecb260
SHA512
7fb9fbddc9909028cd94b879def702a616474269224e03a1742c8fea817b818ca471784e5ebc7e3c1b6a27b988811cb89c2c0e895aacc29a1a48889c53295428
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjDLRKGhsVQcSz/cvVBLE9MrAYi5Kda:7RCVcAHzYRjDLRXhkQcGB5K4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2cfc20b665b0c263a3758c693a972cf3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE