CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3aba22ed6c62cb45fb2c6349fe035611_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3aba22ed6c62cb45fb2c6349fe035611_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3aba22ed6c62cb45fb2c6349fe035611_JaffaCakes118
Size
94KB
MD5
3aba22ed6c62cb45fb2c6349fe035611
SHA1
42f8157069b2f13221e600150a6234f5f16a28c4
SHA256
22d443793cddbb831fae95e33853775b94e4251b7b3d043bb8d3c8595014918a
SHA512
999aa8c95703a28e035648038a6abbf89e081900e02cdc7c42012d61976f559b80318cd677be868bfc40be3173e08845eacf64ed83bba45405fed00630c93b46
SSDEEP
1536:Gtbad8oQmjBhVNiHseVw4tIxO9aqlMWYBx5XiAQV+giPB:maSMBhVNgVpIxOMqlMxx5LgiPB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3aba22ed6c62cb45fb2c6349fe035611_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE