CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1c3149f591b8de6af88fd5737d0b1d8c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c3149f591b8de6af88fd5737d0b1d8c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c3149f591b8de6af88fd5737d0b1d8c_JaffaCakes118
Size
108KB
MD5
1c3149f591b8de6af88fd5737d0b1d8c
SHA1
243e7f6c55df008b412f17f0ea678db57c4b2cc8
SHA256
422b4283848ef3440a51f703eaeeaa3c8cd87cb193b382b5f9e0746334d5b34a
SHA512
e4f744352ed50a5ec0903650f2332afb35301080e990758ddc34f891df619798e194106fd25e2b1c65c0e9a46859ec17956238a74c9e5cf03a41388f6d77c51a
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvupWXcfevKsOc+CbuA4YjdQvYjtBBTbedJ+T0LXjYjE:6SFMDgVswFLdNnMWaCF4YdhkdJ+4ToE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c3149f591b8de6af88fd5737d0b1d8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE