DllCanUnloadNow
DllGetClassObject
Honaabc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
5e7c06f314914b1388aa37e602ad7f55_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e7c06f314914b1388aa37e602ad7f55_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e7c06f314914b1388aa37e602ad7f55_JaffaCakes118
Size
216KB
MD5
5e7c06f314914b1388aa37e602ad7f55
SHA1
3f7cfe03b077c01e8f591843e1bd5fdd5838272f
SHA256
f51d1cba65fa6447623be396d2b85df06b6c4af07cfe03625450092a8f3d3c7e
SHA512
4439326635b155dfe66d5ae76748b230c52019e5421c7beebc8a07395629dc9be9c9a06617ac2569abcafa9a8fb7abf6c73037a0009c130ab353d3d9fe91f18e
SSDEEP
6144:phrl1NWPLfVYF3xqEhNR7mYd+Y2oS6Ogw:NjWjVymYotoS6y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5e7c06f314914b1388aa37e602ad7f55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Honaabc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE