CancelDll
LoadDll
Behavioral task
behavioral1
Sample
632d18df2dbad31e4a2fa1b2e39752fc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
632d18df2dbad31e4a2fa1b2e39752fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
632d18df2dbad31e4a2fa1b2e39752fc_JaffaCakes118
Size
109KB
MD5
632d18df2dbad31e4a2fa1b2e39752fc
SHA1
d3ab64fb07765f470922b4156296e3e3bbac7977
SHA256
15cba0ebab66d79964b19995bbb95e4f2ccaf6fdbcd58c74d23a94ab61797365
SHA512
6231b91645503edfe390d8126cf9a0ce9edd5f8b3a72c050aca0e49b31603a3024263c23edd25df3df21fee904dbd08bbfd8cc3a7b209870cd8188f79f9e6ff0
SSDEEP
3072:6SFMDgVswFLdNUvz6DljbIkHDG/d0rBD1sxB:6SFMDgVs6BNAz65wkjGF0FD1sxB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
632d18df2dbad31e4a2fa1b2e39752fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE