CancelDll
LoadDll
Behavioral task
behavioral1
Sample
40df77329dd3af3708787d91dc1c8597_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40df77329dd3af3708787d91dc1c8597_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40df77329dd3af3708787d91dc1c8597_JaffaCakes118
Size
93KB
MD5
40df77329dd3af3708787d91dc1c8597
SHA1
1be27f26f7f5725a150534ca7324fda6cf2c4ee0
SHA256
b30392f233064e09af1e86191d262302ccf6fcc3c04754d41d4f12635a807330
SHA512
4682c126fce9cb8a4c6da8ebd7aa70867e4578890f0aaab89c26319510ff2ff55af30eca0b1eee76743bfce37792255424763a048a643ccebb3f187330703161
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCpMpFzPJ+F+v7UAIS1/i4TuwjxC9u/oG:Ud5W8kw/jdt9YDJyCOTdslyjx9/Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40df77329dd3af3708787d91dc1c8597_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE