CancelDll
LoadDll
Behavioral task
behavioral1
Sample
311ae9aecb5a35735214c7af49810711_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
311ae9aecb5a35735214c7af49810711_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
311ae9aecb5a35735214c7af49810711_JaffaCakes118
Size
121KB
MD5
311ae9aecb5a35735214c7af49810711
SHA1
e57c7ac1a7b38c6da14b2979862453c948844704
SHA256
1461215b4614cc70a7c1f7c349e0f62620ae643a2cee51db53aae47f5734704f
SHA512
718e5d16a314e3cce46813e9cedf341ee1d3acbe6f4a1bdd7f54d01cdadf235fa1407c79a1d39de3904ce68d202d3087c568c8304082176826f6ff93c84b86f2
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqZs1kyJDvN/L5vGfs5hQo6Afm78WPVVO:l9L1xm6hpbVcZ3kF/LRxhQo6V1dw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
311ae9aecb5a35735214c7af49810711_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE