CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38cf1f0b22d62a6ea478e63f5c50f346_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38cf1f0b22d62a6ea478e63f5c50f346_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38cf1f0b22d62a6ea478e63f5c50f346_JaffaCakes118
Size
90KB
MD5
38cf1f0b22d62a6ea478e63f5c50f346
SHA1
aa2e383cf5b3b3c13a72a2fcd398052616ae4f2d
SHA256
7c3ce366a3cb39dcc8fd6f79cb4a6f62034d1dd59538f56f4be4eff6b58a914d
SHA512
3e3637921ebd337858544d5f843c29bbbb673efe7c84e5a029b6f8d395f848abccee40d0bf68c95150506987b1e615066d93d08240e21e19d956163a1126cad1
SSDEEP
1536:53/5hksBgk16zIUiHD6TEgCOV2EMhq2Y5EsYQ8nWAPynD3EG:53/5Su16zoGbV2lqPF38nWAanDUG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38cf1f0b22d62a6ea478e63f5c50f346_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE