CancelDll
LoadDll
Behavioral task
behavioral1
Sample
31b8112e03550a7a73e8dbf8e616bc27_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31b8112e03550a7a73e8dbf8e616bc27_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31b8112e03550a7a73e8dbf8e616bc27_JaffaCakes118
Size
95KB
MD5
31b8112e03550a7a73e8dbf8e616bc27
SHA1
b03b6ddc0fc643ede8822f7851e0ef5a54261200
SHA256
944d6e6695d95425f7978ee08af68276771f56e39dfbdc1c62fb559a0736adc6
SHA512
bdfebe7e4c5406781febd6c852da37f8359bad6fd572513502206eec5946d3f7b80985a049918ba4a7a7ca1cc0271bc5cb52500dd3b9625e002e43d24e4a4a16
SSDEEP
1536:LmSQNbJE1vj8gDxkOhTBbNsN+VbKfutngzmsGbA:LmFty1L8gDyOhtbON+Vb7Ngb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
31b8112e03550a7a73e8dbf8e616bc27_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE