CancelDll
LoadDll
Behavioral task
behavioral1
Sample
36136fa17659c49fa12cb464cd2f89dd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36136fa17659c49fa12cb464cd2f89dd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36136fa17659c49fa12cb464cd2f89dd_JaffaCakes118
Size
6.4MB
MD5
36136fa17659c49fa12cb464cd2f89dd
SHA1
2be15366ed8a377b91b76b8922c9e73caafe1d16
SHA256
f13c72ceea8b3d8316e2d0a86226e7d845982c83f64f35972f96953a00419606
SHA512
d0885f13885d2463ddc4058ccb88e4c940659ba565f305b57dbd013e3384df7e054d329187c7cbbd0998c8df8da00bba1b8d5ba2b7315e7072b7cb43029cb504
SSDEEP
1536:OQvJIzBVpeR6fG3Ib/wAiI6B06nQehL6LAi6/M6uTWLxfGo+ezrxN:OQOiR6fGSP866nQeoEi6U6lBGoFN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36136fa17659c49fa12cb464cd2f89dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE