CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4a3899b267a94eb8735ddc4375a61bed_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a3899b267a94eb8735ddc4375a61bed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a3899b267a94eb8735ddc4375a61bed_JaffaCakes118
Size
107KB
MD5
4a3899b267a94eb8735ddc4375a61bed
SHA1
ea7a5f18da315d11e26a1e371161df041beb6cfb
SHA256
b7b3f884308514e6079707e33fa8bf16cbc5d19066ee4b5996d961afefee940e
SHA512
a42b09ba3cddd3541ed89a11b0c4732b9e84ef4a822221f3fc6f0d30e1db3156fbdabea73122c5d460106ee432992208c2561150614451efaaf67a2eceeb66c3
SSDEEP
3072:7RCVcAHzYRjDBklTNs793G+AYpt8uxJHbz43NUEKhp:7syzRh6Zs79W6t8OFb0it
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4a3899b267a94eb8735ddc4375a61bed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE