CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38293b259b5840abde167c36b77f9dba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38293b259b5840abde167c36b77f9dba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38293b259b5840abde167c36b77f9dba_JaffaCakes118
Size
101KB
MD5
38293b259b5840abde167c36b77f9dba
SHA1
d4f92fbfecbd4270a89050133c785cf254e57a2e
SHA256
35853b5ad3fddd43d13e39fbd16a11f4de27a908ac884cda50e8eb2143a52b74
SHA512
2aeed7825527b4e35e325e25b81972fda5538cf8281a154b703a4cb1c9f73cc232381b345e737be6ed3e8273797550fb1897b0888ea6519541a35387650616e2
SSDEEP
3072:LmFty1L8gDyOkRIyT1NooHGPhL4yACUmi:LUty1FyyyTUoSV43r
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38293b259b5840abde167c36b77f9dba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE