CancelDll
LoadDll
Behavioral task
behavioral1
Sample
44b9bdc4e6452de0957bca8641da8333_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
44b9bdc4e6452de0957bca8641da8333_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
44b9bdc4e6452de0957bca8641da8333_JaffaCakes118
Size
107KB
MD5
44b9bdc4e6452de0957bca8641da8333
SHA1
400d824743ccc1586ecabd5359b033c2838f1ac8
SHA256
09dee20472c66cf0a83a8697a6c4b0726edd7bf4c7dcc87c8d8481f35c980343
SHA512
c1830cd9585e824a014d420b5001aa6a560a19a53e675e4337c8353438ff3334309793c1411fc74e9888c0a77873c893b6b73e11c0371edac515607e58ffb005
SSDEEP
1536:iEoS0CiFekw0pR7PN5fEKL363vkW0/a5ZFNxnp4PADfAVIWDwBbFI:iEoHek1z7P7fEKLK3sW0/abJe4/WDo5I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
44b9bdc4e6452de0957bca8641da8333_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE