CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3c9fb6a42bb93b94c91c5d8b75b6c703_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c9fb6a42bb93b94c91c5d8b75b6c703_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c9fb6a42bb93b94c91c5d8b75b6c703_JaffaCakes118
Size
111KB
MD5
3c9fb6a42bb93b94c91c5d8b75b6c703
SHA1
959abbc1796649ded11cee13c0fda0c40fcbcad2
SHA256
6c494c39523630851f141afe296e7114054e6fbd5bbb70ec2b9c3803b0c018ed
SHA512
d605b88dcddef64a2734426c243a627f0f1fc8c69f9991e66c0a995b580955a7bf29d5fe20fdd577b8ef47097b42aef246ebf5341ad6906553e40e8851cbf476
SSDEEP
3072:l9L1xm6hpbVcxqPCJogegRWpJpSwJ855wy1Fch:hnhpp10VpUpZ85GyEh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c9fb6a42bb93b94c91c5d8b75b6c703_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE