DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
5f01b2de69335a0fcaa93c5dbb0941cc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f01b2de69335a0fcaa93c5dbb0941cc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f01b2de69335a0fcaa93c5dbb0941cc_JaffaCakes118
Size
92KB
MD5
5f01b2de69335a0fcaa93c5dbb0941cc
SHA1
d69350c66b702b53c1e09b3c59fa55b50502f822
SHA256
774423a0f1ad5a141d63e674dfe9d780969f1bdfcef1e3a24b66d89ead2e1445
SHA512
708dcc6a8431c1759c6e24e6e365c4c9c9bb5ef09f254652668ccc92e8a76aae51e05c6643ec24d61d61a5b9d928ab42e0fd936b516fccdd5e84ba053b41f87d
SSDEEP
1536:COD+mimCLhcfur2JTLKKr97P16tCRlQMNwqrM+Y4zQjrMv0TO1NThiI0n10:ZDGLhGY2JLKe1PsulQPMHuMcyPTH0n10
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5f01b2de69335a0fcaa93c5dbb0941cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE