CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3da1e41e0eb5e68a90007308a4fe77f5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3da1e41e0eb5e68a90007308a4fe77f5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3da1e41e0eb5e68a90007308a4fe77f5_JaffaCakes118
Size
99KB
MD5
3da1e41e0eb5e68a90007308a4fe77f5
SHA1
d903f91bb6c16b9d92aced5dc65a4c72e2d89297
SHA256
f0580dac7435704836eb2fb06bd62c2c4b8bdc3fdaa70fd7fd1aa5893d21c4db
SHA512
152d7856a730ed7fd718536f67cb4a9c084c5a2b377e0ac239bc2ca25747b693424a4545fd817c924b6d9647735a96f741fb431b5eb2a5a02da9ec8112b67464
SSDEEP
3072:/BMmjXCoFnj418oJub1lYARHcsAzM7ltySx4:pYoFnc5MbceSoDRy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3da1e41e0eb5e68a90007308a4fe77f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE