CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3dcd7d0741baa381f7226ebb59c3be8f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dcd7d0741baa381f7226ebb59c3be8f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3dcd7d0741baa381f7226ebb59c3be8f_JaffaCakes118
Size
6.4MB
MD5
3dcd7d0741baa381f7226ebb59c3be8f
SHA1
b599a88c7a9d8cdd7a750af11077d92e2b90cbde
SHA256
ed87bc61ccc091f584525b692d10f726606afe9566d436e26b6d0986a6971b86
SHA512
e729d696e028e495b85f3b5b4489df395862ff4e1339563458428bfc6004fe4b0c9ec2762d9cf9875baa5e2ff92a4b3b24b0d8f44c701cd6f66c9534c611ce79
SSDEEP
1536:uQ/F0cA+F5RVGG2UKxm83VVNytmPYVxyDlpcOHDjLyvi6NIU0qGP:uQsORVGG2NrbNXgVxyp9jWxyUpS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3dcd7d0741baa381f7226ebb59c3be8f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE