CancelDll
LoadDll
Behavioral task
behavioral1
Sample
48e151d00555e481a26ebed248d336e1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48e151d00555e481a26ebed248d336e1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48e151d00555e481a26ebed248d336e1_JaffaCakes118
Size
104KB
MD5
48e151d00555e481a26ebed248d336e1
SHA1
375ad20329b19bda821e4c28e391ecff94a238f1
SHA256
e1b904cf0caa0d934765680a8f29dd52ccbc0dbda53bba150f42967fcd420452
SHA512
a95bd0a58f970363bd73e67c666c82b89f1aa9d4a582874e63b6ae82eb19848befd76582f936816c829920f38fb7c05b9edc30cd8597f1f0cce53bdd0987a7e2
SSDEEP
3072:uRtNn1pU0S8XFFMs9PFGFNoOovD2kzcNrdqmahLwY0rp/:uRtp1+a++whovDdzcdwm7Y0rp/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
48e151d00555e481a26ebed248d336e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE