CancelDll
LoadDll
Behavioral task
behavioral1
Sample
47253095e4ef9a8d143b39cbe1859e33_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47253095e4ef9a8d143b39cbe1859e33_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47253095e4ef9a8d143b39cbe1859e33_JaffaCakes118
Size
114KB
MD5
47253095e4ef9a8d143b39cbe1859e33
SHA1
1515159af06335a973cbff484a6e18f27a986652
SHA256
3e54373e7a4440b978152ff7e25ecea31ccc7856e6ece05a8e09c96126c31379
SHA512
a69c3b5629645a1589624c900abb7cb22beb4069d7e05af2f86bf1f9604847333c49d7f7c90d9225cf2b01d5e452598d247428855bf7c62d8c11f1bdd38c7359
SSDEEP
1536:/ePxCUjeSp7qrnhBbgA6U7eLKe5zl8/ESnM4ib4sfiDN9HBSecfhaNadlI:WPxpuLhl6P5ze/ESnM4ib4D7Bshan
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
47253095e4ef9a8d143b39cbe1859e33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE