DllCanUnloadNow
DllGetClassObject
Hackhac
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
31125aca6cc5d2aab5cc8ce74e0abc98_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31125aca6cc5d2aab5cc8ce74e0abc98_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31125aca6cc5d2aab5cc8ce74e0abc98_JaffaCakes118
Size
216KB
MD5
31125aca6cc5d2aab5cc8ce74e0abc98
SHA1
2f451f4c474c7498d07e3cc8906b67b77267d822
SHA256
ae79122ef6f6bac156c572b6db24c01a137a11ef36aa551de66e81a31e04b5b4
SHA512
79c3b5caa2d04dedba573038ad34a3388ae6e42cad95b7b770a1fa7c8a885fabbbb5e216bd4ee5c165e473563e7401d7018cdb868c81591c33eea772bc4230f0
SSDEEP
6144:8hrl1NWPLfVYF3xqEhNR7mYd+Y2oSdOgX:cjWjVymYotoSdd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
31125aca6cc5d2aab5cc8ce74e0abc98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Hackhac
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE