DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2664e2783ea460e4fb28ef6d69659d2d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2664e2783ea460e4fb28ef6d69659d2d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2664e2783ea460e4fb28ef6d69659d2d_JaffaCakes118
Size
730KB
MD5
2664e2783ea460e4fb28ef6d69659d2d
SHA1
1967ecaf05bbe6c3a2afa2e0d6ecfb0228ae5bbd
SHA256
89e88a1989a1fddd56c46cd3760937a09fba7f64ef20d8779b9e729a7f728ffd
SHA512
ffabc3269aeacc492412b6f0f911f155255873d72e23d6168dd57a344dcdd9d934ce439faa7ec7130b40a5e0f68d67f9030b363d7ceebfbec5ed1509facbc438
SSDEEP
12288:NA+IM9DfchE3yqZ5VvnoWrQmvBksNSSzA:G+ImDAE3NZ/Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2664e2783ea460e4fb28ef6d69659d2d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE