CancelDll
LoadDll
Behavioral task
behavioral1
Sample
434c763b78d1ba31354680d3b10fab50_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
434c763b78d1ba31354680d3b10fab50_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
434c763b78d1ba31354680d3b10fab50_JaffaCakes118
Size
106KB
MD5
434c763b78d1ba31354680d3b10fab50
SHA1
43a3fa499dcfa28640cf8fee0c042fe07f5831a3
SHA256
8dca85976c5cb3dd709f301436c8a1dbab4b19a0d33c5d44dee52527f8b98596
SHA512
277e4519c911ac0d38f1b74972e2c8a8f6853c08e2fab45b80f67c8e5009eec1dae5e515c48046f769b135a7a3bf4c9133220f47693e6056a2f8d48e3f6dc349
SSDEEP
1536:TpoZectu35iLnGlfahbfLzpDwfCEr8d26CtpuG+3+QX+5DWBp22TMdXXWXbN:TpoZP8ijIfaBfLVDQCOtpbo+5D4EdXg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
434c763b78d1ba31354680d3b10fab50_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE