DllCanUnloadNow
DllGetClassObject
Honaabc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
2c4bf4f419605bc4b36ee7995bdb3497_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c4bf4f419605bc4b36ee7995bdb3497_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
2c4bf4f419605bc4b36ee7995bdb3497_JaffaCakes118
Size
216KB
MD5
2c4bf4f419605bc4b36ee7995bdb3497
SHA1
98f9a63dd28a04bc6085a517abddce0d84239648
SHA256
24dd155cb3f05ade6b3f167f234dd825d0c7786a44dd563a89ef4235c77e2269
SHA512
9b525916964477aeed1a9b76f5564a665c743fbddc2e04b142eb05321ac082f43a6c7698d06fa9226db151656eb0f10e3f67d4eee48168f6d7f64832ec7925f6
SSDEEP
6144:Shrl1NWPLfVYF3xqEhNR7mYd+Y2oSoOgs:ajWjVymYotoSoC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c4bf4f419605bc4b36ee7995bdb3497_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Honaabc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE