CancelDll
LoadDll
Behavioral task
behavioral1
Sample
40da73a105c554c36ad263efd4212758_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40da73a105c554c36ad263efd4212758_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40da73a105c554c36ad263efd4212758_JaffaCakes118
Size
122KB
MD5
40da73a105c554c36ad263efd4212758
SHA1
772b965c111bb8efda6db6dc2b0c6b881c6be724
SHA256
81a8d7990bd38939e40ee5576d2ecf88c0dceee7648261057a4153be25cbefbc
SHA512
2676e75bfed053578fbdb88a9c4f8c08cfa048c313e8ec95401368b20a1220d31a8d30600658f39fd43d4c9e2aa633e0c91d6442a8b5c917a01e98fca6e0e54b
SSDEEP
3072:l9L1xm6hpbVck7WSuL47/LhQNqIizwGu8NNNuIc7+Bi:hnhppTWSug/Lsq5znDNNNuIcyU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40da73a105c554c36ad263efd4212758_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE