CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3fd4ec3ae6e937a1d991bd80da32cebe_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3fd4ec3ae6e937a1d991bd80da32cebe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fd4ec3ae6e937a1d991bd80da32cebe_JaffaCakes118
Size
84KB
MD5
3fd4ec3ae6e937a1d991bd80da32cebe
SHA1
4af09de699b055584f3fea02c3b7ade88ae42333
SHA256
97c2358eeac911e627d48fcda0d92f579472604922200d8744b8b7562fede55a
SHA512
f56173296e266df5af154d42516d03fb18f4c43a3540f244e57cba869ad233637ae32c4b3d401bc9103fbfd9af66112e7718c474c48bd2dda8cdab9e606855a8
SSDEEP
1536:Zn4Mi33LS7enDxBT7vfLhVufey2iSb65Zb2Yl1M6HWBy:Zfi3b8enD3TjfLDJriA6naQM6HWBy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3fd4ec3ae6e937a1d991bd80da32cebe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE