CancelDll
LoadDll
Behavioral task
behavioral1
Sample
47f7cc24f6af258ca644ede017b7543f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
47f7cc24f6af258ca644ede017b7543f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47f7cc24f6af258ca644ede017b7543f_JaffaCakes118
Size
122KB
MD5
47f7cc24f6af258ca644ede017b7543f
SHA1
b0520c58cb2dbb4a53b697929ba18f9cd091e334
SHA256
c2187d52fed74daf2f69041bf3a06e01a9cdc322ab7af8b7bf76d1f96d32161b
SHA512
bc3eef445ba745f6373cad713ee4b2e5fda97f96e9b44dcdc53573f5e87fb09c86de14030d244155c251e4c3d73c8bc90579b4f6a8631f6ee38f6a2990363a89
SSDEEP
1536:pUEkUaLBLNH8D3uUtcriJSnGyv8VymqP4W:DExNcTuUC4SnzkImU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
47f7cc24f6af258ca644ede017b7543f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE