DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3386b33e36f8100882b12a4c45c33277_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3386b33e36f8100882b12a4c45c33277_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3386b33e36f8100882b12a4c45c33277_JaffaCakes118
Size
577KB
MD5
3386b33e36f8100882b12a4c45c33277
SHA1
265201d39db79aff24da3334c5fabc2fda9d352a
SHA256
427ec01c5339c3a6c087536b57ce3c39401fa14a83c930540d5ff8a2a0f40b80
SHA512
c1033d006a6a1bc3406c2cec28ee50b0bb63335e4bf1fa801b8c993f7b1775192ab9fcdb9e70c175e6acb8d2b03b4cc887494aeca8742a509e289ac1f7d77b85
SSDEEP
6144:m+o95g9YyNewDMQ+bWc65ZJKUxYic/7I9mUVJEbO7KOr:mP5gBdMcJV6iGE9VVJEbO7KOr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3386b33e36f8100882b12a4c45c33277_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ