CancelDll
LoadDll
Behavioral task
behavioral1
Sample
37d38fab52dba55e527ff13f10aecbf8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37d38fab52dba55e527ff13f10aecbf8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37d38fab52dba55e527ff13f10aecbf8_JaffaCakes118
Size
99KB
MD5
37d38fab52dba55e527ff13f10aecbf8
SHA1
f015a11aefa384d3e27c5f1ba619c097d3803265
SHA256
f8a9646b2589bf5e9d91a9c81aff58967b7d3b347d4e2168a29c8e6481b8ea73
SHA512
847752d60f16237b5b3aeb9180ef4cf16786a0dfdcb282994fe3535553a0cf39e6b325f2d44199eade2f5a798be8ed415851aa64d9d70ad6e5f4634fac64a650
SSDEEP
1536:4G3uk8hPgcW3cunhBbgA6Ut5v8Lte9QQszmSa/hHoG9t9n:13sL6Dh75v8Zx3aFX9n
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37d38fab52dba55e527ff13f10aecbf8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE