CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3ed597a5c95bccc444d0dac82d8a1fb7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ed597a5c95bccc444d0dac82d8a1fb7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ed597a5c95bccc444d0dac82d8a1fb7_JaffaCakes118
Size
104KB
MD5
3ed597a5c95bccc444d0dac82d8a1fb7
SHA1
e92af53cd4cd52d7b24466ec4e35fec6f039fca9
SHA256
b019d9d5bbbd767ea864a855ddf5f00bf978ff438a1843b1eda264a0e91da867
SHA512
c2dad3fb6796cae46ced8cadc4f85839cae1c9a155eb436cb076d21f48221554974d44f4b2dcce1ee9f17b0951458ab0bcc5875b8fe981515d72246b2d554512
SSDEEP
1536:7rOUbmJ/ZS8DDfWuY3Mdzkprr+ERE2Xzh96fQFPvSrB6:FbmhoODfHYGkwoNoQdvSrB6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3ed597a5c95bccc444d0dac82d8a1fb7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE