DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup
Behavioral task
behavioral1
Sample
262bae85fc6c3a4c7a98aeffcbabd560_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
262bae85fc6c3a4c7a98aeffcbabd560_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
262bae85fc6c3a4c7a98aeffcbabd560_JaffaCakes118
Size
88KB
MD5
262bae85fc6c3a4c7a98aeffcbabd560
SHA1
f2cd0c513fe1d8d79e0d56301c9f3f8d728d9cff
SHA256
d449d04e0c33b52703ddced88679e38edde35a750d93f4909a0dbdaf77b0b0e9
SHA512
d6f17389303302e55e71f8d25a712c7ea9a13f9bd4e9d91b3222faf10d72fe379566f467dda8b138b0ffe7182ad1b2e38e5cfc274f8df4d405400dbad2d616ab
SSDEEP
384:cQrTINXuMHHgHo+KhUDQ/yxBeWCuZi9iY9TsjeLgWSxc3MgT:7r01nHYePusiisjeLgjxY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
262bae85fc6c3a4c7a98aeffcbabd560_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE