CancelDll
LoadDll
Behavioral task
behavioral1
Sample
48ee456a02b9bb9bf0b20182be7dfe42_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48ee456a02b9bb9bf0b20182be7dfe42_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48ee456a02b9bb9bf0b20182be7dfe42_JaffaCakes118
Size
102KB
MD5
48ee456a02b9bb9bf0b20182be7dfe42
SHA1
59ee53a5307525139d3d99d4a951fad6a1da5bf9
SHA256
d52fc6526d976efe538fbec9326b1e1ea91f2bccebc692482d443ff8cadfc1df
SHA512
e47a88b17fadbd42784012387d13cd0564d952f5156d9f2de4dca0407f99e7157a1172f1ce2d3fc3495652ddcc8cd3650bc594beff0894a27ee381c40ab0c5ca
SSDEEP
1536:kFjbtlR0g+MMVED3ZTFhTWdyZFi/GxoEtv85ojO9o+sva/wVh7pf:k1plR0g+M1PodyZsqVvmoq9xs4kh7x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
48ee456a02b9bb9bf0b20182be7dfe42_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE