CancelDll
LoadDll
Behavioral task
behavioral1
Sample
39af2dc0194618e8e6553570d4139aac_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
39af2dc0194618e8e6553570d4139aac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39af2dc0194618e8e6553570d4139aac_JaffaCakes118
Size
88KB
MD5
39af2dc0194618e8e6553570d4139aac
SHA1
7b682f99016023803c7dac6c7e7b8b2be2ea11b0
SHA256
810334b1ab32c522aacd0f2313e3c5cead2b4bb66fa1c2f3c7cfe8a73f9a001d
SHA512
c980444a658d056b221e4a964e01b4efff34636aad5fc0ac371e08d8fb97fc41f462a18fc3f9c94e684106271449ee3e365e5c4a2209a73c594583ed6f722a64
SSDEEP
1536:J3iyDPFw2bprmjUmq1AnNkc0tyUc/+XFbJ9dq16V:1Tw2bpCK1AnNn0t92+VbDdq16V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39af2dc0194618e8e6553570d4139aac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE