CancelDll
LoadDll
Behavioral task
behavioral1
Sample
47cf35de588adbbedf2298886fbc3193_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47cf35de588adbbedf2298886fbc3193_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47cf35de588adbbedf2298886fbc3193_JaffaCakes118
Size
104KB
MD5
47cf35de588adbbedf2298886fbc3193
SHA1
674bcf95d593868b99b0ea2d7f7bd1ed548fbecc
SHA256
cf3ea0f3958fa4c10c39f0d12a6b3b0e9e8090a92ba2301ea49d40212cc2677e
SHA512
67ebe047db592350f7c7e1cdd432c60ca159f8e55a5845693d8c28b3500b53bec00a19c8a3f0c5fedc928a0aa7549633afce7984eeb43f4d023b2b9828d15a45
SSDEEP
1536:gd4zQOOg3qSGHXKuk+kc00BnAUS4/u97MxG9LDPu1dUW0c6abpxwLE9hA4D:YS6nSa6uk+vhAUl+r9XPs+BabPwQ6w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
47cf35de588adbbedf2298886fbc3193_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE