CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3e4e33da4c54a57620133f5a46f2556e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e4e33da4c54a57620133f5a46f2556e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e4e33da4c54a57620133f5a46f2556e_JaffaCakes118
Size
94KB
MD5
3e4e33da4c54a57620133f5a46f2556e
SHA1
1bcdd957900de32d3dc79d7e1127df4c872c6c13
SHA256
278683b7754a7a11f990de06a58ec6a8927cb79af6159512f6cc19b2047ef304
SHA512
2bacd55f1f564e458c503de670aaa4f10a2ff08274673fdfcd5c1bfde2706d7bf9570bd0b69b5b9fe5acae22dd67c988eea537399ff08299f525f9f64046b8a2
SSDEEP
1536:9iJJJXbJlTYTnkU3IKGbxJGO55GAG0OKXcogzXmC6C+bb/:cJvpYTnkU3Ib5sAHHFCs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e4e33da4c54a57620133f5a46f2556e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE