DllCanUnloadNow
DllGetClassObject
Fgobgof
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
4d559f876879a1a32ded41ca05f9c529_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d559f876879a1a32ded41ca05f9c529_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d559f876879a1a32ded41ca05f9c529_JaffaCakes118
Size
216KB
MD5
4d559f876879a1a32ded41ca05f9c529
SHA1
65d1baf53128cb3142f463c98e026499cf9aa18c
SHA256
36ef8c7bafc4304733effb9ff7d03461b901c45b5ffbe67ef4a2fa770f7bf9fe
SHA512
6f4d89c6e60f18589a84529cb85cbcba75d8bf6825bc8d4d97208554efcadaa47798f97555031cf69062d97d00e67fad7732640ffc54cca274c11d3eb5eff245
SSDEEP
6144:phrl1NWPLfVYF3xqEhNR7mYd+Y2oSdOg5:NjWjVymYotoSdv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d559f876879a1a32ded41ca05f9c529_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Fgobgof
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE