DllCanUnloadNow
DllGetClassObject
Pmnljnl
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
3f18f9cda74d0e5fe17464faaa175eb0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f18f9cda74d0e5fe17464faaa175eb0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f18f9cda74d0e5fe17464faaa175eb0_JaffaCakes118
Size
216KB
MD5
3f18f9cda74d0e5fe17464faaa175eb0
SHA1
21c57eb9d195d002f7bd72daf29f21f8cada9c4d
SHA256
140290c3eb6bd1927279cd133175fb57baf61ad154c5997c04df63c6c7608d3f
SHA512
5371f2d180fe131abc5a48363e4a09555f9b77ac36db90ef39492bb8dbaf97a63977bc12c45de5cddef6eda53ea078f37a15f2e333d5275130623aa072c7cfdc
SSDEEP
6144:vhrl1NWPLfVYF3xqEhNR7mYd+Y2oSpOg+:jjWjVymYotoSpc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f18f9cda74d0e5fe17464faaa175eb0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Pmnljnl
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE