CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3fc501c0bbdbe34aad7cecdd14ea80b0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fc501c0bbdbe34aad7cecdd14ea80b0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fc501c0bbdbe34aad7cecdd14ea80b0_JaffaCakes118
Size
102KB
MD5
3fc501c0bbdbe34aad7cecdd14ea80b0
SHA1
87228528521224035f1850ad4239ae8deafac8b0
SHA256
da5456a366b1221ab664ac57ba7637685756a9900699fabf1112384c2faeed09
SHA512
c0e0f7a6769a7e63ee208a01144734a0e49f7a43719202391c830370dac260b8b289f4b47f1c8dc98b3d8ac5a4e773ec150e85fe3f525a67c3988230d0bff7d9
SSDEEP
3072:Ud5W8kw/jdt9YDJyC/nlf0KylqTrf/U/kK17P:Ud59bdt9sx/nWnqTrf4kEP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3fc501c0bbdbe34aad7cecdd14ea80b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE