CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3dff768aa456c18a09c49ff975d6f23d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3dff768aa456c18a09c49ff975d6f23d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3dff768aa456c18a09c49ff975d6f23d_JaffaCakes118
Size
94KB
MD5
3dff768aa456c18a09c49ff975d6f23d
SHA1
22a3b7d30393e3caba57143921915a81d2d50cc0
SHA256
d1c437c6e669c9ea3e4624f44636cbec4937835d02d1ef8c89621712215baace
SHA512
eced989ce6c41979315a0e328c4c3e8cf5e7065fdaa9274c75f3d60fa0d05bd5a80edda24617cfde3d297d47ec0fbc515b5db177f7323b3d86a55aa98ca2b5d2
SSDEEP
1536:DjMKODJPutB+69AmJpF/LPf/Oamf2opewELeYdskRkRu4PP781E:+MBpAmRPfmhZpXfmNRmH4C
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3dff768aa456c18a09c49ff975d6f23d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE