CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3f34c9a103d9d85a313e88bc3902ada5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f34c9a103d9d85a313e88bc3902ada5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f34c9a103d9d85a313e88bc3902ada5_JaffaCakes118
Size
99KB
MD5
3f34c9a103d9d85a313e88bc3902ada5
SHA1
d2d63c361a3cea91a000138d28f478a58b66dc3e
SHA256
624031608c34076d6a3777ef0cb829fec00db6eea75e5922a896f2aee95c3eef
SHA512
ab1fd2b20c1903e01734ab5148428398119dfe798e34342b942b024d7f54e432fa0036755aa0a73559b902491709683f53466d669430f59da9cc7b8082eec3ad
SSDEEP
1536:/xLK2OReR3CHsD5zERjXQbE8ukpWt8DF+zg+M7iCez7fBXIkMwQB:ZVOReRyHsD+RjXnnkpZ0zg+M7nSfSkIB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f34c9a103d9d85a313e88bc3902ada5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE