DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3f0573c59862177b271f4b983451d685_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f0573c59862177b271f4b983451d685_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f0573c59862177b271f4b983451d685_JaffaCakes118
Size
248KB
MD5
3f0573c59862177b271f4b983451d685
SHA1
e852963e8e10e4906163b68924c7d49f2c701443
SHA256
8343a73cb6460fafd52d24a0d04fadfd84981c59a12a7b1b085989a0f51caf47
SHA512
e5a18d04035d13a015404e4e4663121f4775f77a307e7fa6416022d31d7cc30db339291b16767caa38374dcf5f5d7161d7be110497965a5ae75e8df1f7ab96d8
SSDEEP
3072:th/u713L+6PcNnFfVTiohSlUnNvI2niuDovn8VE+qOuujbf5Kr9QBS7:th813L9Of4+pnidnl+q/uHwraS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f0573c59862177b271f4b983451d685_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemInfo
GetSystemDirectoryA
HeapAlloc
CloseHandle
DisableThreadLibraryCalls
WriteFile
DeleteFileA
CreateFileA
HeapCreate
ShellExecuteA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE