CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38a440711c5189c9faa96569f2f585ba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38a440711c5189c9faa96569f2f585ba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38a440711c5189c9faa96569f2f585ba_JaffaCakes118
Size
94KB
MD5
38a440711c5189c9faa96569f2f585ba
SHA1
d84d4596f8d51363f743006f627456b4e3f459ee
SHA256
ee08e0f94cfb73b9ee527f59441dc451ab43b72f295dd6d26f579023baff46da
SHA512
b2e91c14259a7052bbdf604c82a3ecd83332c049b66b88d58306eeffb3133d276536f6378012e4597d0b8dc6d2013864d7aea7127f547d530e520e6b4b3aa44a
SSDEEP
1536:ARlNzx55thtq8FLeR2NME8629KKzlPtl1JI+C:ARlNzx55pq8FLeRZE8X9KK1nC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38a440711c5189c9faa96569f2f585ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE