CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38d7311c89d7d951456a2b18a1ab9ade_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38d7311c89d7d951456a2b18a1ab9ade_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38d7311c89d7d951456a2b18a1ab9ade_JaffaCakes118
Size
6.4MB
MD5
38d7311c89d7d951456a2b18a1ab9ade
SHA1
63e5553c6779b47b2637d532cff61f65b8e50190
SHA256
e28ff64c4735b874976529801f590fcc024f4772cc477e996b17bc739e34387d
SHA512
2ccb086178217a3bec0d0d7d662031c2d0e607c6d39294a52bb9e3fddbae97eb0a152ad0e167b1640b5e343c2229366fae6d0849334da017349f07d8e6723d43
SSDEEP
1536:aegPWgmgz5YXjfGA9Gp1FrThVdSXzeIxSw1MKTw9:dgPW5g9YXSCq1FpSyIxSwCKTI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38d7311c89d7d951456a2b18a1ab9ade_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE