CancelDll
LoadDll
Behavioral task
behavioral1
Sample
668cb6d08d57d79d7f88421e35d97366_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
668cb6d08d57d79d7f88421e35d97366_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
668cb6d08d57d79d7f88421e35d97366_JaffaCakes118
Size
91KB
MD5
668cb6d08d57d79d7f88421e35d97366
SHA1
e018c54aa37abd32e4e61ebd32dd8c3831e81af3
SHA256
718638421330d18e4cef3b2d938c8749ce37befa390a6e5d41d7a5b452387e6b
SHA512
c4bcc320ebf75f2c6f99adab4d0aff25b901e179a02b4ffbb3f054606025926f1576ce94f822d039a67aeff82c466aae24c4919ea9a4e5ba2afd27b928fff9e8
SSDEEP
1536:INWujxA5EY8fwKVAIV9vqfMkpb35BPeOp2rwOC9g94Japy8:x/2Y84CAIvvqfMkpFp6C9g9Bpy8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
668cb6d08d57d79d7f88421e35d97366_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE