CancelDll
LoadDll
Behavioral task
behavioral1
Sample
39753bb84e9424e19788104872ad2ab3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39753bb84e9424e19788104872ad2ab3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39753bb84e9424e19788104872ad2ab3_JaffaCakes118
Size
106KB
MD5
39753bb84e9424e19788104872ad2ab3
SHA1
6dcfcdc470dee1bfb014cfcf5b1fc164232f9de3
SHA256
03ba8d7485e372f5a95f8144b553e8a4c2f9223ad27cdfecd2530b536b860103
SHA512
7d9db609c222e92099372b3629a0f48490d68b8b7b2736e7a1c38bf408455e1f58ea5a1bb60117e4e9779f03fc64d1f13a6bdd22256338de80ae68f5764ab260
SSDEEP
1536:TD6K271gp7DXHQ49AzkVXKnQ752ik+VpRENJrLhV614vgomoJV+EgeNZKfKI:TDGYLwwGn5WpaJrd5vgomahlw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39753bb84e9424e19788104872ad2ab3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE