CancelDll
LoadDll
Behavioral task
behavioral1
Sample
423f09bc2852c98950c46465c3ffee1e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
423f09bc2852c98950c46465c3ffee1e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
423f09bc2852c98950c46465c3ffee1e_JaffaCakes118
Size
104KB
MD5
423f09bc2852c98950c46465c3ffee1e
SHA1
72b92ab800f2241443d3540977852a4040c06c2e
SHA256
f7fa0d98f39eb85f006bbbcb5e6505dfb09a88cba2a6646d62eb3f00aff96a39
SHA512
d65a8d1ab9e842c34f621574342a7408efcf5a627bd0d9f445280a4c89e971793c2f8fca47b411dfbb0335e416c5c35abb982e7a3459fd6dd14eb0e2258fa67b
SSDEEP
1536:/xLK2OReR3CHUulsJ1MFGFXvT8HPviCGYyXuG6zcLEzZ/:ZVOReRyHUulsk8YHPviCG5+GWEO/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
423f09bc2852c98950c46465c3ffee1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE