CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4c90449bbfe11eaf97c9818fae518cc3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c90449bbfe11eaf97c9818fae518cc3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c90449bbfe11eaf97c9818fae518cc3_JaffaCakes118
Size
107KB
MD5
4c90449bbfe11eaf97c9818fae518cc3
SHA1
2ffd78c9fe0d00e0ab68c1553cf704eb26e9bf01
SHA256
973d09c8e2eb7ffa077d03bc3705376a8385eee7f1b41078d3893a32d5eee802
SHA512
07c14a4d1bfbe4f831940417d48d8fb9f4063c85656d2130c55c0ce592032cd6a31e7e50450b80490b08a1f8118f965e84d7c414f9b165124db87d2ddc6a85cd
SSDEEP
3072:0OtFNv/r7r0csw7pvVIX0RjgHI7W5s0b4FswlT:0Otbj7ts+zK04Iy9olT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4c90449bbfe11eaf97c9818fae518cc3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE