CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3adec5e7fd52c0d11f955a83dcc2cee6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3adec5e7fd52c0d11f955a83dcc2cee6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3adec5e7fd52c0d11f955a83dcc2cee6_JaffaCakes118
Size
109KB
MD5
3adec5e7fd52c0d11f955a83dcc2cee6
SHA1
e09d202f395c6a0faec2d6033469adb90d29c426
SHA256
b2225b261c530286e363bf3aa948d533875f79217a30206903dcce6a2d3805a3
SHA512
ddbf403bad4c1d6aa4bb164340dc8d2680f200745c6d08cf1d6c1c0dacf0d105937faa198bdfbb7ffc8ebdc34d69a406e25275f08108c835515fae0099cbec6b
SSDEEP
3072:cftJCL0Ieox/1MWrK1pVZvx6LShRjUOhPuO:cPCLUeC51xhPPuO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3adec5e7fd52c0d11f955a83dcc2cee6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE