CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3356b5fc64d82851155ed9319f218500_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3356b5fc64d82851155ed9319f218500_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3356b5fc64d82851155ed9319f218500_JaffaCakes118
Size
88KB
MD5
3356b5fc64d82851155ed9319f218500
SHA1
baf2fa8ed2b87fb240e1484ef4221b53d80786a7
SHA256
e155ec4cf1497cf17252fd341a6c9c0dd4c742ad26d50195c31014fe4cd011d9
SHA512
195eed3abcf14d368f2ddb9999cf210ea3098fdecdfc94184460c720dcf33258d4567098d804fe924ef2d4f145da2c834312c782bda39235781ae606a387c1cf
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr7A3ehioLRm/xG2vgi7GIUNQt:03/KeW8V3rQsA3+iCRaxjg7NQt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3356b5fc64d82851155ed9319f218500_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE