DllCanUnloadNow
DllGetClassObject
Cnmcnlj
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
5dd9812587052b099fde24f71989c3fe_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5dd9812587052b099fde24f71989c3fe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5dd9812587052b099fde24f71989c3fe_JaffaCakes118
Size
216KB
MD5
5dd9812587052b099fde24f71989c3fe
SHA1
65f148339a380a58da179a84275c33c768047df4
SHA256
33671cc2ab1eed163fc7dc81d06484c2d10646ca81dd0444cbde789f36398862
SHA512
cc6f82d16f89e408b63ebf5e03b2833bb69ad5e80565f6c19d892c5f38ece6e7007f1d0f528b0358e47f028b0d559afee0b173b2c391a485f082e9053dc031d8
SSDEEP
6144:8hrl1NWPLfVYF3xqEhNR7mYd+Y2oSGOg1:cjWjVymYotoSGn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5dd9812587052b099fde24f71989c3fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Cnmcnlj
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE