CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3da637da2caf27ee1089d80268318272_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3da637da2caf27ee1089d80268318272_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3da637da2caf27ee1089d80268318272_JaffaCakes118
Size
132KB
MD5
3da637da2caf27ee1089d80268318272
SHA1
dd52cff9402dff6fa84a0a8c2e2b9f37d0134a21
SHA256
7843cdd62a0a132d57e847f6607feaf5df93ef39b20f174fdb343fbcf5c6dd91
SHA512
2ae7d598a6395f278f361dd45035fda6d0f6249bd084f9a251d70759d12f41db5eadca707a08262e037abd4065947a06b5921229d133f2bd85524063ad72b9e0
SSDEEP
1536:IJrxM1wLW8DYcHcNRlzzCty1Z+HcfgRqJaoRRvp/1gLbAMCLYq:Ixm8DYqcHU41Z2KAg5mkfLr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3da637da2caf27ee1089d80268318272_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE