CancelDll
LoadDll
Behavioral task
behavioral1
Sample
324a50178d64614e108428718535a302_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
324a50178d64614e108428718535a302_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
324a50178d64614e108428718535a302_JaffaCakes118
Size
6.4MB
MD5
324a50178d64614e108428718535a302
SHA1
8fb8126f76d3dc452f36faa6e2dd6c05bfd0b518
SHA256
1b0924aa0b17e26a366c17fdbdae5d97e0abad7dd78968bc5dda7dd99a1687d2
SHA512
d728745e6a69dbc4faa15c6c82234457092c2a201bc586d6903c15bf62cf2d34b775a277d566c76d77cbc6bdb69c58e4cbcae3ef851cf000f2ffe4ff089d9005
SSDEEP
3072:sPLWZNHKpRbXUf8SfUbMeAkjyziEzAEUp:szJpVXUf8wUbM5gBzEUp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
324a50178d64614e108428718535a302_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE