CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3f8abd7a0adfa55f9bb5cb8c04c8cf47_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f8abd7a0adfa55f9bb5cb8c04c8cf47_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f8abd7a0adfa55f9bb5cb8c04c8cf47_JaffaCakes118
Size
79KB
MD5
3f8abd7a0adfa55f9bb5cb8c04c8cf47
SHA1
55c93eb5d8f15752f3bdf6ffba7a0f7f5bccf29c
SHA256
6c5f5233b6037d3ba844223b2eeae9cb064eafd4a5a77649e42ce8f0ef5e8c90
SHA512
ec0c7f942a948c7e07dbabb67a3db642d0e800448d54ce246410c13601a75b7587e1aa62ee9df5fab645d1ecb9625573e23d844032285d666033da6b007d2138
SSDEEP
1536:0pstl9F0gv/r7r2Ziu7T1J3SaXQnA3kXqRr:0OtFNv/r7r03/1waX+qr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f8abd7a0adfa55f9bb5cb8c04c8cf47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE