CancelDll
LoadDll
Behavioral task
behavioral1
Sample
32010b0198b3357acc9df7d64843c5eb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32010b0198b3357acc9df7d64843c5eb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32010b0198b3357acc9df7d64843c5eb_JaffaCakes118
Size
106KB
MD5
32010b0198b3357acc9df7d64843c5eb
SHA1
c8d5ca9c33627454e476c6a63cca62d0aad45077
SHA256
cd90af19f7d487232320241172ce69e2ccce82378291acb6d1e96ac69d4e46f2
SHA512
d0e4553d6c1e543d9b3a2d9fa8c74d4f2c8b9d69c540cd1ba34a142f7c4ceb48a02cabe481a275d36ca61c9215bcd204706f4efd8678b445c1f06d5150a04ea1
SSDEEP
3072:TpoZP8ijIfaBfLbnmOS3WMO25PRRzVX2TYlm:TpHiuaZnmOSxO2VX2TYo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
32010b0198b3357acc9df7d64843c5eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE