CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1848dd3bfb52cd7d1744df358a51adec_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1848dd3bfb52cd7d1744df358a51adec_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1848dd3bfb52cd7d1744df358a51adec_JaffaCakes118
Size
83KB
MD5
1848dd3bfb52cd7d1744df358a51adec
SHA1
7061f799a35bb4e905aa472853dc229f4be1a38b
SHA256
1af13433c05f763bd3dfab28eb539fb405416e432d5943164378082858ed31bd
SHA512
26463685d22b768f8d6066e504b207638bd05f5611bb07801056c5dd7c241321b04f928c3aeb9ecaff44e0044287f12760bfe6118c7bdf84f1076af1226239e7
SSDEEP
768:LcTOpEt/tAcyg/e7KfOv8QC2Oz0mKEGBOZWrxsWCHccNLa4sZyT3Guq3DKcTZY5a:/xLK2OReR3CHyZWWupkxVCMLHMAhjDD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1848dd3bfb52cd7d1744df358a51adec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE