CancelDll
LoadDll
Behavioral task
behavioral1
Sample
441420b70f607c38f97aaa5b05107bc1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
441420b70f607c38f97aaa5b05107bc1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
441420b70f607c38f97aaa5b05107bc1_JaffaCakes118
Size
81KB
MD5
441420b70f607c38f97aaa5b05107bc1
SHA1
aeab76a267a67930382d9e099f51ca63dc28d7b1
SHA256
feeae79a7454be2d0a21dbbeaaf822da16832ed918eda4ac3bc72996f9505677
SHA512
7e9558bff8c7f63d0adeccd75a391e79f4f5a14c5603e60486676bc1acf984d0b75baed2c7b5ecb03f9cfb0338f29998d2f5147d4ed51a8b1682c66b4d989062
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8BowcpdJ1VLBiRI0t6:FfUxhDtZp8vIdCFBfcm/0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
441420b70f607c38f97aaa5b05107bc1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE