CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
379c68b7c200897bd9c360172679a4f0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
379c68b7c200897bd9c360172679a4f0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
379c68b7c200897bd9c360172679a4f0_JaffaCakes118
Size
270KB
MD5
379c68b7c200897bd9c360172679a4f0
SHA1
ce84bf0b072a2512091320b809fd68e538f0f110
SHA256
6818f5fd4433267f4e49c8fc3bbdfd1bc2b098b9df14d0a1b90e89e0e5efe60a
SHA512
825c3ff521c4457b5c7ae08313f11ffb1c4345c2ece4ea0ad9e167a482a2ff997d2adf81986d8a59e6776fec7f35f3492d2b1597fcd2d66eb742f1a7eb9b2657
SSDEEP
6144:DvDLxwdEtumneSY4VnDck9cYE3egqj/1BoQvU+QwAZyAgY2EV:DvPxwdEtuQ+4VnR9C3eddB5UAj3Q
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
379c68b7c200897bd9c360172679a4f0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE