CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2e73903f1f34367e7741f768fd3e9c25_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e73903f1f34367e7741f768fd3e9c25_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e73903f1f34367e7741f768fd3e9c25_JaffaCakes118
Size
98KB
MD5
2e73903f1f34367e7741f768fd3e9c25
SHA1
ed9a0e22a2edadcf6e104950c6478831cb4cfa4a
SHA256
8ff9f06661dafd8cf67e6f0ebc5379b2dcc64c08784fd9ea4181ff116449ac12
SHA512
6f1971ed3eb0b10702177f2824b123bc10cf09a77dbf8a6cd0709bcd3cb525de94c2922cd28e05743446d76688b6f821077791e23fb243178c6857b88396ac8d
SSDEEP
1536:TD6K271gp7DXHQ49Afmm7VVlEGYQkRJ3ug2dFgprS4SoKC10L:TDGYLww3mpVlxYQkR9ugQFgpqoSL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e73903f1f34367e7741f768fd3e9c25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE