CancelDll
LoadDll
Behavioral task
behavioral1
Sample
37a6e08168df6164968d82ea9101b7ba_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37a6e08168df6164968d82ea9101b7ba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37a6e08168df6164968d82ea9101b7ba_JaffaCakes118
Size
134KB
MD5
37a6e08168df6164968d82ea9101b7ba
SHA1
d1898c069ff57b55d02147c7b6a8f59b28a93b21
SHA256
19c1028bd2e339c6562df92b083e2500fe91f6f4ce2d1cd58accaa8a6c83a03e
SHA512
fcf7ec9ab05d65e867184cec0e99c5fdc6ed31044afa549325232b29fe86e6fb21fdc3f7198fd462a4980abf1d0dd8d64ca893469fb21318ab93887034024b07
SSDEEP
3072:vEj/cXEy098QGF0OqK+9V/Uqckli2BGK4:vEgXj098XF0OqrnUqckM2B4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37a6e08168df6164968d82ea9101b7ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE