CancelDll
LoadDll
Behavioral task
behavioral1
Sample
490e676576d12a7cc4e792564c46a558_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
490e676576d12a7cc4e792564c46a558_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
490e676576d12a7cc4e792564c46a558_JaffaCakes118
Size
107KB
MD5
490e676576d12a7cc4e792564c46a558
SHA1
0466c03a5d9f6d23baf3434d87bc088077f39224
SHA256
6e23f2bee3c93c40372b2b5256b8b5b647de0a9cf31a5969bce8699cdaf7f052
SHA512
aca7397e93d777beaaa560d675da791344948c3b9ef6c4cfc586bd4a5aa28f5f8ed3277d4a46c9f94899e3f4ce8ed3b50feb3a05b24e4e70aeff4167f0af1472
SSDEEP
3072:YJOqgjs/L37JcWLrOgsGIIHAkOgQnw2RHdmkL:YJOqLjlDL6gsGjAkwzRHzL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
490e676576d12a7cc4e792564c46a558_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE