CancelDll
LoadDll
Behavioral task
behavioral1
Sample
65109eefc65a688cf1abd5f066f14a4c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65109eefc65a688cf1abd5f066f14a4c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
65109eefc65a688cf1abd5f066f14a4c_JaffaCakes118
Size
91KB
MD5
65109eefc65a688cf1abd5f066f14a4c
SHA1
cae4e9e359405fc7f0ab95a19bf74f5b03073dbc
SHA256
fe20d5819aae07a5c7fdafca3550612eb517aa2450526208ea9bec1d8b270cb6
SHA512
ac083be6c8c15d8ee2726a94d9b54ab768c72231f6f0b485be9f187e1980070a31b78b20e2db1dea9ea817e6edb6eef6fb33d520e7b33efb08913e7ef47f17c3
SSDEEP
1536:7rOUbmJ/ZS8DDf3B0JoH9Pojzx0A5LnNskHz:FbmhoODf3B06+j6A5SkHz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
65109eefc65a688cf1abd5f066f14a4c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE