CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3b3589f7fa5fd1d6c4e9d42565fe2504_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b3589f7fa5fd1d6c4e9d42565fe2504_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b3589f7fa5fd1d6c4e9d42565fe2504_JaffaCakes118
Size
117KB
MD5
3b3589f7fa5fd1d6c4e9d42565fe2504
SHA1
c75d9eaffcbc456c3500db7183e3d110e6ba64ac
SHA256
ce1b89d8bbee7e2fcc830fdd280bd88ce7a9e8a39c97f79b765588d60fb1e6ca
SHA512
655149c617357d536ae3dec24fe2b5cbfc5bc7a5680dcd78aff68f3dd0f41ff3e858058d13ad89df3680efeb0a378d1c971ebf6a0be6f1ab6a53e1d87f24ff57
SSDEEP
3072:ahdIw/oY49FsvKIxneXp/fDe+F0clb1l4:ahB749yvKIFYHDu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b3589f7fa5fd1d6c4e9d42565fe2504_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE