CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3a9a1d30488cf6c612b220e1556f95ee_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a9a1d30488cf6c612b220e1556f95ee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a9a1d30488cf6c612b220e1556f95ee_JaffaCakes118
Size
102KB
MD5
3a9a1d30488cf6c612b220e1556f95ee
SHA1
33d07ba85ad90efbdf079e162d98f0cf1fc76d70
SHA256
76cc2bbfdfc80c6ae666214d94538ee8cf1dc84b8acec477926bf14bced49507
SHA512
ff209c203a8de3e6fb7d055b9724880a66cb41cf0797cad6abf7bbcd376f8545fc2db59d72654f7647b2b303f33271c0767cf637dbfb59f25498121392482758
SSDEEP
3072:jDW+plsUwoLU0tgKY1LrqFyX0HeSTHKaDHhF/hz:jDW+pyU34y87kTDHhF5z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a9a1d30488cf6c612b220e1556f95ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE