CancelDll
LoadDll
Behavioral task
behavioral1
Sample
363d9690b05e36916d148d909c039458_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
363d9690b05e36916d148d909c039458_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
363d9690b05e36916d148d909c039458_JaffaCakes118
Size
102KB
MD5
363d9690b05e36916d148d909c039458
SHA1
7fe0563301465c490e6700dc55d019bf2283c4d6
SHA256
16411019db3ec6f58377d0a8cef54902ee491ecd3a9c0b30fb37fdf9b24f547e
SHA512
185840c4c370b1e5773428cb15b42c3eb93cf7275f7644fc598e0288f7d11d8d80927e3dd4cd87bea1f02bf900c603856fe85ed90f297433c698f542a139186a
SSDEEP
1536:LbfRsoNi6NO3xLtOEezmEidL4xSfh9VlHoxxGm0aUo+oBd2QE:PsgO3ynSEQExSp9VlH8WPoPBEb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
363d9690b05e36916d148d909c039458_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE