CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4bd23d53abb0989c3b17ac0989d215b3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4bd23d53abb0989c3b17ac0989d215b3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4bd23d53abb0989c3b17ac0989d215b3_JaffaCakes118
Size
105KB
MD5
4bd23d53abb0989c3b17ac0989d215b3
SHA1
173d53d53ba9cd983e859741cd4681e09a369fb2
SHA256
d1ff31dcac462ea6a2c9a490f21fad6787ac39a1842458e22ccd0c05667355a8
SHA512
304079fb1880b9edc091f0ddc933d09d0fb6e7feb297495691d5451d13793471ac3de5232f900b0e949abdc18dff88dccfa75f36e48a542c031975cb54aaed97
SSDEEP
1536:SQclh8MIwu5+oYCwBUSEyGfkWJv1ZBobXsHxVUg/sAa7BZUx:ahdIw/oYCJyRWJvNozeLUD+x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4bd23d53abb0989c3b17ac0989d215b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE