CancelDll
LoadDll
Behavioral task
behavioral1
Sample
14eba8fb02af1a84c02b8829b5552d68_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
14eba8fb02af1a84c02b8829b5552d68_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
14eba8fb02af1a84c02b8829b5552d68_JaffaCakes118
Size
137KB
MD5
14eba8fb02af1a84c02b8829b5552d68
SHA1
64e9fa4c9a3f5359cb631033fa79c6d3b4d81ed1
SHA256
6ae8140d9ae401951aefdc76a04ee2e0ff102e75ebac55b1f7af25183899c0a5
SHA512
d037ff0b154aa589e5738785357ad806fd7b0a8dd9fa4874452b7e704dfe3ce808f8664e2b0ef7e478b20fc0170333cd40c61a6e074f838debf96a8a1d1caf63
SSDEEP
1536:pUEkUaLBLNH8DLw2vJ/KwllKBnWyvPDC8AkLBNF1GW3JHfzkx1OFB:DExNc/wC9KwInWyvbskLBNF1r3pQWB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14eba8fb02af1a84c02b8829b5552d68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE