CancelDll
LoadDll
Behavioral task
behavioral1
Sample
67c0b7881bbf477575184c8e1de4388d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67c0b7881bbf477575184c8e1de4388d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67c0b7881bbf477575184c8e1de4388d_JaffaCakes118
Size
95KB
MD5
67c0b7881bbf477575184c8e1de4388d
SHA1
f597a706551e7716327d7e6e5a0dbf24c861f3c1
SHA256
45ab4774440fff090aff7fd7391281ea8c4c7dd631fb86bd2ca3bba776d5d2bc
SHA512
3767882d5fb0c7fec8f3e61fa0d1587da8ec5f2cd8b5e7dc1c6778f4f16bb22dbe7bd568b68af7612cd86ec4547d276fddccc4740456320768b37a89298ee9c9
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO87p1gyN118qHGcBJTCQbTBw8x:FfUxhDtZp8vIdCFFrN118qHLT3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67c0b7881bbf477575184c8e1de4388d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE