CancelDll
LoadDll
Behavioral task
behavioral1
Sample
318c0a12d052f53d07666c556a9fa9d0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
318c0a12d052f53d07666c556a9fa9d0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
318c0a12d052f53d07666c556a9fa9d0_JaffaCakes118
Size
106KB
MD5
318c0a12d052f53d07666c556a9fa9d0
SHA1
fa1e373433be1f9c18cd1e26e321c3d347b5fca1
SHA256
2c7dcd9b42a043ad1f2d11efb33f676feccd956ffda501564df7b086cd3249f9
SHA512
e7aad6b12352e0aaacca65a19fab4e2f94ac49cd2f171f2a3f4187868e871d7006bd3d9ed6e2ec312bc36bf8e8b2dcba52fe7eee9430d0d9c28c3e544b719be9
SSDEEP
3072:cftJCL0Ievr5yzdHL+xuIJyu96Xz+H5bGl:cPCLUvr5QdHiY+yucXzubGl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
318c0a12d052f53d07666c556a9fa9d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE