CancelDll
LoadDll
Behavioral task
behavioral1
Sample
49bf1da912d0a8f162a2a3e23bc8c10f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49bf1da912d0a8f162a2a3e23bc8c10f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49bf1da912d0a8f162a2a3e23bc8c10f_JaffaCakes118
Size
145KB
MD5
49bf1da912d0a8f162a2a3e23bc8c10f
SHA1
6ab0004eaca90289a93905259bd6563ed49ab0c0
SHA256
18a2ead80dc4733977591e05b71f98d2453095b457e86cd85482e2c034eaeb86
SHA512
b51a4782de7d43c6538221f1f19d994081c0dc26323c8df0ddc7c538b088e1cc7c2ad603f528f1c0f1d77f2536369f1816d2da6e810580f794bf02226cd540ce
SSDEEP
1536:pUEkUaLBLNH8DG3ZzQuNwug4EhF7qEmgO5Q5FM3j1nqDBM3Ly7:DExNci1QdfFfLO5W2nqd2LY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
49bf1da912d0a8f162a2a3e23bc8c10f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE