CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3e4032f324e521ae712aaad1b53f0b93_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e4032f324e521ae712aaad1b53f0b93_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e4032f324e521ae712aaad1b53f0b93_JaffaCakes118
Size
124KB
MD5
3e4032f324e521ae712aaad1b53f0b93
SHA1
0bca2b0609a7e53927a7631443452119deef95b9
SHA256
aa00edcaaac79aa8a3be42911a03b97eea84f9fe84c35a0639b9b52e0fb4af99
SHA512
97ff7f1e4a2ad4bd31dc7d508cf590295969b82e6e008050b4e4fe662801e4a11ef327df0f4744d8dfab6790ad0c1deadb8df02af3674e129634cf3d62089c12
SSDEEP
1536:qJOicqgmfzx8xnhBbgA6U86eecVcl0wbqQTVTGoQ1S5iGIrAFPAajHroCbv8JFsi:oO+Bd8Vh26DucOwbzGgiGI8FL00vYFn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e4032f324e521ae712aaad1b53f0b93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE