CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
SetVM
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
2b8f0732bb600626c918294d4a73b6b8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b8f0732bb600626c918294d4a73b6b8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b8f0732bb600626c918294d4a73b6b8_JaffaCakes118
Size
270KB
MD5
2b8f0732bb600626c918294d4a73b6b8
SHA1
4539630c71e984a4e5b5fe33dbf8123fa5404e36
SHA256
89da5da5780835e35cba2332a8facf309d7dd340bd11a18d6c58dce3a5ce84d7
SHA512
cd3cea540dc1d3589fa8fbb0808eaa8f4d11c71a2c3b8557d37a5a1192facdfb0a7d78a72c5c89fd41feb72f7fb6869cb3e3b3176763310aa7243102b335eb4c
SSDEEP
6144:1Ff5Uu6M18JOJzlrtJ8a7bK7QD7ZoWpG4p9aMY50:1xxHEOrtHbK7QBoWRPYu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2b8f0732bb600626c918294d4a73b6b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
SetVM
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE