CancelDll
LoadDll
Behavioral task
behavioral1
Sample
656918106389f5b652d0229afd360e7f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
656918106389f5b652d0229afd360e7f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
656918106389f5b652d0229afd360e7f_JaffaCakes118
Size
93KB
MD5
656918106389f5b652d0229afd360e7f
SHA1
04ba996ade2e72f9f0dae2712fbb5a0f5c0a1da7
SHA256
10636ee47ecc12c6c99f119a05b6f1f6576e364cfe9c82d2847ac93162e9e080
SHA512
b883ef00ca97be8deeaade1a5ca392d45056814ed380374a4e50386a3b5a34bcac6c0be40f7836cb66cb1229539e343109b258eef3034052f1cee9472b7fa1e8
SSDEEP
1536:QPHd2owFn+G5mAGHnWauj10c0yUZEApphXXZbtGOGY:QP9hwdmPnWpU3hXJbtGOGY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
656918106389f5b652d0229afd360e7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE