CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3339ee89585489316c2fc64cf0f5b238_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3339ee89585489316c2fc64cf0f5b238_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3339ee89585489316c2fc64cf0f5b238_JaffaCakes118
Size
128KB
MD5
3339ee89585489316c2fc64cf0f5b238
SHA1
bee38286af264bff2b004b45645d46b289f7ed39
SHA256
cdee88e7304cbb30e6c5b58cf716644a9f6f2c9849e0ff6a3bc966819bc576f5
SHA512
5f18a9b10172daf3a13bc5a571493ed515d21ed85c357659f7f300fd6cec1a11127e09ae844a46d5de01e2a592269c254b99b7f968043d00348de33401a20163
SSDEEP
3072:l9L1xm6hpbVcPWLGcx8RMP9FyiZGiItrELs:hnhppzLPD/ZGifs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3339ee89585489316c2fc64cf0f5b238_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE