CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3808cd3cf7bc977095d105b9485abac1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3808cd3cf7bc977095d105b9485abac1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3808cd3cf7bc977095d105b9485abac1_JaffaCakes118
Size
6.4MB
MD5
3808cd3cf7bc977095d105b9485abac1
SHA1
c2651a9b17da45413551bf1be33a2b94579c5e0f
SHA256
ef4e66487201b6a7155edb3bc6b5f9034aa19eb2ddd8a82675cf4d1be4261fba
SHA512
0e9041df3e101ec2c89f6b6be9d59a45febfcd4cba0b7830a2e855346c9e0dc98aef0bf65054dbc1c3158de83713cc3848b9b59d85661ef529069dc680bd7544
SSDEEP
3072:kcO5UsYOo8XdaC/0mjezu8VSOaMJl4QBu9:ROJobC/02H/OGQBO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3808cd3cf7bc977095d105b9485abac1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE