DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5cec241b02632938f3f2e9225e16e45b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cec241b02632938f3f2e9225e16e45b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cec241b02632938f3f2e9225e16e45b_JaffaCakes118
Size
57KB
MD5
5cec241b02632938f3f2e9225e16e45b
SHA1
707dde4200f60ae56303ef965b92b274095e62d6
SHA256
af7d8f5b2307f741db1398fa9f6a03175f83d280ad987a7f3efece1463f6fc50
SHA512
d659296acd3eee536d57a518865ef79b2a3cb144dd1752a4a724d4ecdb6c6e8c4f79e726dcccc3341f36385d96b7ad7791f3a8fbcf4a16944672d07a28a8d2e2
SSDEEP
384:8BIfZTmQuy2Yn18qkRJHYQAF7rFDBxh6bQNFpy0imewun9n3jTPPcub2TLQcV:9BTmQ55SrHYQAFfQwjmmewOHncub2TLV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5cec241b02632938f3f2e9225e16e45b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE