DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunAtl
Behavioral task
behavioral1
Sample
06fc2d4c2f3dc24d56502e0de32c93e1_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06fc2d4c2f3dc24d56502e0de32c93e1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
06fc2d4c2f3dc24d56502e0de32c93e1_JaffaCakes118
Size
54KB
MD5
06fc2d4c2f3dc24d56502e0de32c93e1
SHA1
899bb31eac7cadf8437312c778aca3fb113ad995
SHA256
0005b916204b41446bf601055d0f397ec1d24cc773f0cf36d1eafe8b2b0066e6
SHA512
c147dfa35071c61cccfea156a60706512a403328b2d4f55c0643bad7eb24efe8be74d83251227b83381525f5cad06ea36d8b6e504d405a6708ba15ed7b5dfae3
SSDEEP
384:OUDEAkHhyJ4E9dNKtypVJhANJqXqOk4vJcyR1j29R7RFA+iAXgkmGgfdH:vEAkublKtypVJyNJqxR16NfMAeGU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
06fc2d4c2f3dc24d56502e0de32c93e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunAtl
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE