CancelDll
LoadDll
Behavioral task
behavioral1
Sample
674cf4ad6bdacf6a5c882556abaeeeab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
674cf4ad6bdacf6a5c882556abaeeeab_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
674cf4ad6bdacf6a5c882556abaeeeab_JaffaCakes118
Size
86KB
MD5
674cf4ad6bdacf6a5c882556abaeeeab
SHA1
f1ea10ce40fd6ac2e61383afbe02d08665bd0f6a
SHA256
5ba7934661490919f108033f9ff81fc6871f73ae12cd7d0e89b5c0bd0ae99160
SHA512
dcff8591efaad0db98f2ae970d4c40e2f39e963437883b5d4187fffc04b346c2748e0bb81addb90da939550b8239dfe36ce9cd1d3769a0526dbe6ceda22e9826
SSDEEP
1536:SQclh8MIwu5+oYdEN8DT2TK5r7/LsAnw67Mq3V:ahdIw/oYdq8PqK5rsAnw+l
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
674cf4ad6bdacf6a5c882556abaeeeab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE