DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
3f6a3bae79e467423862d6fab35f47de_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f6a3bae79e467423862d6fab35f47de_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f6a3bae79e467423862d6fab35f47de_JaffaCakes118
Size
22KB
MD5
3f6a3bae79e467423862d6fab35f47de
SHA1
a9c1ebc92d303f5a848a27797bd3e5dea73dccf5
SHA256
79958120259020d224312fd54cda1b907d2f990303768082cf0019c174901189
SHA512
9c2513ae366283a2ef0b3ea642324003c02d595a87f4ac697cfc1cf03d324072f8c04875fc71e9f6af4557dea6e66e8fa13dac72be00ca0e54a84f83ebde78bb
SSDEEP
192:5hDlDrGQf5VaoGw6vct/GjXRHV09KuGBq9WPmQMJAzT3yXyCy:PDBTfLazvctstV6KuK0JkzyXyC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f6a3bae79e467423862d6fab35f47de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
lstrlenW
GetSystemDirectoryW
GetModuleFileNameA
MultiByteToWideChar
GetVersionExA
lstrlenA
lstrcatA
lstrcpyA
lstrcmpA
LoadLibraryA
CompareStringW
RtlUnwind
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
wsprintfW
CharLowerA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE