CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2ecb540abbdcf2633d5a18823fda39f1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ecb540abbdcf2633d5a18823fda39f1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ecb540abbdcf2633d5a18823fda39f1_JaffaCakes118
Size
98KB
MD5
2ecb540abbdcf2633d5a18823fda39f1
SHA1
6e67a372b0548947c7783e107ef5819041cbe654
SHA256
e3c03706fd69e632450ad25584a782ccd7fc3d12509c33a3aa2521ff74b0bb35
SHA512
4cd0b65bb7f2ef16ebda4ce97a540135ea3348ec4d5e522604bc3031a5e2f6ab8b022ea19b254fa12a902a1afa36670df0e311e13167e9043d9d5ba6a605dce5
SSDEEP
1536:RosSg4ngB/6hVB7al3xXjWYOsHGu+4rIE4p1cLL3r+8:1SoB/67B7aLXjWY3k6IPp18Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ecb540abbdcf2633d5a18823fda39f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE