CancelDll
LoadDll
Behavioral task
behavioral1
Sample
319210986d5a919130a5e8071bc406cf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
319210986d5a919130a5e8071bc406cf_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
319210986d5a919130a5e8071bc406cf_JaffaCakes118
Size
4.1MB
MD5
319210986d5a919130a5e8071bc406cf
SHA1
8fb37d5b3d1d76ec9eb8be267cbb7f7947d62a8a
SHA256
d0167ccfa49be71f922f607325ec877f385ce4c65e45733524a64fb55b334abc
SHA512
9cb9721067a8502ef7bc700eee2c95fc9dd3defb00f2ca8fd851f6106961a2b7fe2e0a054159ce2bd57ce585c33b52d3040a5c068f7c0563d9194454605216dc
SSDEEP
3072:pE24hwvoFW6Z6LsnBN8KZ461RjnHM8vr2V6:q24yvoFWLI1Z46zT46
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
319210986d5a919130a5e8071bc406cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE