CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3bf2b61e7f5895859431af9b03adf749_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bf2b61e7f5895859431af9b03adf749_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3bf2b61e7f5895859431af9b03adf749_JaffaCakes118
Size
101KB
MD5
3bf2b61e7f5895859431af9b03adf749
SHA1
18763d50ddc68abba78d89afe40b21fd416e0f57
SHA256
abbec808ba5fb32b75d7cb9482c173e7a1084cc20fc9523c920f2c09e1d55c4e
SHA512
f25e8769040f622bafc6ed66e6da2c16af9bc7772c892f767be67c299edd7347e6c91e8bfe756d17c73a24750189afc15d8956317695d7c0512ee5cfe2ab5de6
SSDEEP
1536:LbfRsoNi6NO3xLE/9Ef2fAmFdQfg2fqf5KYhfPhJ9YMFqp:PsgO3KFKWtdQfZCf5KYXh0p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3bf2b61e7f5895859431af9b03adf749_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE