CancelDll
LoadDll
Behavioral task
behavioral1
Sample
49195fcae159d3c6c8bbb83dc90889fc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49195fcae159d3c6c8bbb83dc90889fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49195fcae159d3c6c8bbb83dc90889fc_JaffaCakes118
Size
86KB
MD5
49195fcae159d3c6c8bbb83dc90889fc
SHA1
a15c9b6d1e6c4f2a327b2ea756fdb6ee9e8580af
SHA256
8743b1520fbaa90f146cf35d0d97228a4905cb691999c9ff2fc7e0f8a5ac2efa
SHA512
ce97482c7f519d542f2bec7579c8f2beacda169ee2506ed0b3d86b00cc7f48fe9324479387257003ef2655a75f9bf46ac6b0923ede1bd89e3fc0c39804f4586f
SSDEEP
1536:Zr4dVzqJdgJhjJKSYsSoVn4LD+8J3AFIbzNSgKFPgcxHs3QjrZp:ZEdVzq4/j5TSez8JRzNSIcS30p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
49195fcae159d3c6c8bbb83dc90889fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE