CancelDll
LoadDll
Behavioral task
behavioral1
Sample
488178119b53c091e214511ff8459844_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
488178119b53c091e214511ff8459844_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
488178119b53c091e214511ff8459844_JaffaCakes118
Size
110KB
MD5
488178119b53c091e214511ff8459844
SHA1
a368a0b35154c88d7cf3a6c96b295a36fcb335a1
SHA256
219b9a889a396772ba359de67320859a0c73384487010a9a657efbef23a61048
SHA512
2431752925ce477f4cf3ff4a5e5c4f9b693262b150035ddf7af859b983692e070582a2bf915dc298272ba65588dbd36cfc7ec92c151e8bfbc0ba8fa3b3803d1b
SSDEEP
1536:QPHd2owFn+G5mAGHnWauosrn3LhO0WlIY+IHwAHJfXtmjtrEYWC/u:QP9hwdmPnWpjbI0frIHw6RXtUdEYWC/u
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
488178119b53c091e214511ff8459844_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE