CancelDll
LoadDll
Behavioral task
behavioral1
Sample
59b30f9964b22993fbbcc0e079262c8a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59b30f9964b22993fbbcc0e079262c8a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59b30f9964b22993fbbcc0e079262c8a_JaffaCakes118
Size
97KB
MD5
59b30f9964b22993fbbcc0e079262c8a
SHA1
721be9dcd2911e80a7e8182e658dacca6f894301
SHA256
3eb45bf4881a1eccd75aea50fd21d615e46217539e9b1533d8574f7bd13cfe8f
SHA512
5c195393fc96d94529320f01e639428d9601b568ab502bd83d83776fd24ac61a100a44b18fc53e798eab35ac1a09c15ad86a406150aacec7d7ab45829b19d989
SSDEEP
1536:HuT0VKeQn94HxQLtZJSpUthpsQ8XoQXWEA5sAGeES5nWngBnVXqxCic:On94HarSy+WEedIcWgBVX6jc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
59b30f9964b22993fbbcc0e079262c8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE