DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2995696c4df0b53dc68a23b685a8d9cd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2995696c4df0b53dc68a23b685a8d9cd_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2995696c4df0b53dc68a23b685a8d9cd_JaffaCakes118
Size
171KB
MD5
2995696c4df0b53dc68a23b685a8d9cd
SHA1
d6be6c7df9805944d7f20657400d929a7af2519e
SHA256
cff51cb13543e3bd3845d1bf0a3b325f292bcacff201d7b2cc4ae0656c655d9b
SHA512
64795477fa5f783871adb7ea1113df086ccdc2291a2ad97769f667228fe80155760a4d97a5961e61b969687f56e3c092f866734fec7d0419f02e1374749dc4e6
SSDEEP
3072:wEHvQmAl7zL5m04Hov8jqSbGDWUczFtajTx5VXpH5v5outIjQQzc5:wEbWjnJCajTZpH95oSp5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2995696c4df0b53dc68a23b685a8d9cd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE