DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
345fef8faff6c250b595b10f22eb9fc8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
345fef8faff6c250b595b10f22eb9fc8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
345fef8faff6c250b595b10f22eb9fc8_JaffaCakes118
Size
171KB
MD5
345fef8faff6c250b595b10f22eb9fc8
SHA1
980b20336b3307d65142da6165015549220e5821
SHA256
a074efeb9f30b45a2b2a0740f8c93188e4d7cea698bbf9251d691856638c8438
SHA512
55fab3d17b3d4396fceae7158bbb0a86b950ce3aeec00a9865d595231f8eb6217c37de81ce11b7636b03484a66c76f4e25c8f582b91f6e22abe17a494228b7cb
SSDEEP
3072:cEHvQmAl7zL5m04Hov8jqSbGDWUczFtajTx5VXpH5v5outIjQQzcv:cEbWjnJCajTZpH95oSpv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
345fef8faff6c250b595b10f22eb9fc8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE