CancelDll
LoadDll
Behavioral task
behavioral1
Sample
47186075ece648a1921c8babdd31e05d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
47186075ece648a1921c8babdd31e05d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47186075ece648a1921c8babdd31e05d_JaffaCakes118
Size
123KB
MD5
47186075ece648a1921c8babdd31e05d
SHA1
41cd53ee13789c5d65278ef4e702054a06774b24
SHA256
674f9d67199dddfdfe57d4226c8bc30391250e4404910cebd3b1794025de881c
SHA512
b8f9d79e20de43d0e00fd2583444ad190cccc938f5207998fc2d243e098c289f6d0e6baeaedfb32006e444a9d6b93980c4275d9bc203a19a10f5839f41a4ecbe
SSDEEP
1536:6Rw9k6k1FrHc5v85bNOar/7EGYxlBuT2dAvV5r:/cHr8g7EGKPuDXr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
47186075ece648a1921c8babdd31e05d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE