DllCanUnloadNow
DllGetClassObject
Nockpom
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
37505a35e3a3efd5340b3dfda2e164c1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37505a35e3a3efd5340b3dfda2e164c1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37505a35e3a3efd5340b3dfda2e164c1_JaffaCakes118
Size
216KB
MD5
37505a35e3a3efd5340b3dfda2e164c1
SHA1
1b0ce33952a60b526b22b18d492ff85ed5d6ea0d
SHA256
777cbd331739fa93db72cd1a3e3ec70d227281fb61e52a8d34ba60e1d43add54
SHA512
1f0ddae9eb1522117392bc36db2eca7a63fad5b289171c14db2d2336d9c069ca2a44416effd444ff751a02ab36a57be100a47897df9fd377b1f0f59c21ac1179
SSDEEP
6144:mhrl1NWPLfVYF3xqEhNR7mYd+Y2oSnOgM:2jWjVymYotoSni
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37505a35e3a3efd5340b3dfda2e164c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Nockpom
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE