CancelDll
LoadDll
Behavioral task
behavioral1
Sample
39c8b63461b2d86901c27b2864f65944_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39c8b63461b2d86901c27b2864f65944_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39c8b63461b2d86901c27b2864f65944_JaffaCakes118
Size
82KB
MD5
39c8b63461b2d86901c27b2864f65944
SHA1
891817622c98b1b863a1fadbf4c91bd5fe891e30
SHA256
f9aa6c81281e450357b945f754a14af8ce6f729d2bf2b07d35241296aeafbac8
SHA512
663c9fff1e84a46c6a4d1a79bd0cb8063f9f0e978500085320f6763aacd1f27cabd394355981670705e9e4ce0e866e7af72231d9149ade97934bd030aeedefbe
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvuHkXFmg7jqC3yyxT5GgZ1vSSu+:6SFMDgVswFLdNy4FmOByWGgZ1vDu+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39c8b63461b2d86901c27b2864f65944_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE