CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3a6c001c0250779d093a12c58f16aa2a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a6c001c0250779d093a12c58f16aa2a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a6c001c0250779d093a12c58f16aa2a_JaffaCakes118
Size
113KB
MD5
3a6c001c0250779d093a12c58f16aa2a
SHA1
7c60d115f6ae825acd6b7fba47990d2d13a6b05e
SHA256
5c8a92c5d4b5be327fc1bd20e7daf9f0e82e2edf02c119435dedbe55dd8f1d39
SHA512
6f2703f2b35a351e4e57291a845ed44469078ea8a51356a35b1cb436a104c1c94b50d5ab31529f5e1a88a7bb922c0ed76b8244b192737a3825d5c79f81756dc4
SSDEEP
1536:EcMp9yC0yj1dLlzBK3XjC2oAyjl/M/kiygvjOInq4C9DkQDqzfja7dlSDj:Yp9JLlBKnjCRlCkiFOILC9yMdlSX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a6c001c0250779d093a12c58f16aa2a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE