CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38d27ad852b6738d9d99af955bfcc51c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38d27ad852b6738d9d99af955bfcc51c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38d27ad852b6738d9d99af955bfcc51c_JaffaCakes118
Size
114KB
MD5
38d27ad852b6738d9d99af955bfcc51c
SHA1
0a4092d18f60972827e332547a9f7fda42cc32e3
SHA256
052625b5c0797eea895fd6eed5a554058413499522d06467bebec28e20eab91d
SHA512
d33bbaedfbb0f38cdf931f4e72890ed3a013af828965e85ada8330c908fc4927643ce30864ddd3860c913f90e6d6783ea86751a5bea5c12bab2f4200cf458604
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqs2gKtMRkIQCiW7h7hvi8eSLDQEj5P:l9L1xm6hpbVclCRkS7/i8egDQE9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38d27ad852b6738d9d99af955bfcc51c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE