CancelDll
LoadDll
Behavioral task
behavioral1
Sample
36513f8d8ca89d7fc568ca30020d7d4f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36513f8d8ca89d7fc568ca30020d7d4f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36513f8d8ca89d7fc568ca30020d7d4f_JaffaCakes118
Size
6.4MB
MD5
36513f8d8ca89d7fc568ca30020d7d4f
SHA1
98a38399723d32d7f6c08fd76c8c30db11407e10
SHA256
ee19c848db342fc17b4f3176d7c8663e5e9c609cd597cb35aa2dfedc94573cac
SHA512
c0867d8279364e74fe8f0a1a66be7b64065c9abff1ab14e7e77c1f8bdc5589870658b18008c357c7d8cb957236b72400f27d7d3b8781654e96d79d4de1f43924
SSDEEP
1536:Bsc3ZQClsvD61hixlwcHDARu0w0GUB5UgWFzuK/fBGFmBC2S/3E:Oc3ZQCS7qiDwiARAGvUgYt/f4FmBLS/U
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36513f8d8ca89d7fc568ca30020d7d4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE