AAA
BBB
DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServe
Behavioral task
behavioral1
Sample
4612746559997f165c8abfadccf989f6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4612746559997f165c8abfadccf989f6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4612746559997f165c8abfadccf989f6_JaffaCakes118
Size
8KB
MD5
4612746559997f165c8abfadccf989f6
SHA1
3cc9266d83f87b7a4cc9a57f82b0838a6dc73dd4
SHA256
157f48887a646173f76aae604fcdd9ea709e49a3f14aadd011587f4a30d1ae90
SHA512
ce9bfa5689ad0c1ab1c38a513bc7d80a04f02b744454a858053095db173d52cd066a3b406e6d3a09a16441380bcd6825a0a0ec333b86edb5517db85929cd1f6f
SSDEEP
96:xa4ms1V+lEMNf7C//yYUrX++WB4qZDDpkNxGV+d9cwW1mljN1cfGs2DdlxWtXtYR:0V3l96h2WB4qZ/pxVbAwfGHYtYVAil
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4612746559997f165c8abfadccf989f6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AAA
BBB
DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServe
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ