CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3d55765337b1f88739b4f5b562427353_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d55765337b1f88739b4f5b562427353_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d55765337b1f88739b4f5b562427353_JaffaCakes118
Size
137KB
MD5
3d55765337b1f88739b4f5b562427353
SHA1
9436fc38267e1ea574e0da5f27566e6efd3a377e
SHA256
517b918c9c55dc68ebfe817952a6cacd92c03b47e34a44529592c0bd87f7c298
SHA512
11db08ba65795dd766ce83e44ad612df8c73163d396e1a3916a68f739664fb0221c298ca5f20195e867e9fb3cc849d97e11a4dfaf2ccc7d4de840e73c4e787ed
SSDEEP
1536:AHEkUaLBF/H8XEDBQb8OspVXdZFDQ7AE8PvH4n3llBc:vEj/cXEDBQAOsnNZFAAbnH4n1lBc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d55765337b1f88739b4f5b562427353_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE