DllCanUnloadNow
DllGetClassObject
setvm
Behavioral task
behavioral1
Sample
674111331e4d3af6643a02ef60649f9c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
674111331e4d3af6643a02ef60649f9c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
674111331e4d3af6643a02ef60649f9c_JaffaCakes118
Size
121KB
MD5
674111331e4d3af6643a02ef60649f9c
SHA1
46b98bcf3b83b60e360793e30d16947d4aef18d7
SHA256
72a21bd33c26a35dc042885aed6f4ce4f7c13a2386bbbf300f1c1e2d916ec9bd
SHA512
1428788b5ac9969f46a707f4de0cbc0d4e89f6f6678a5bcf03cfed757938399d0cfa480ae574d618cd6b3275df747bc02dcde101113cd529c3df5b4514932e00
SSDEEP
3072:rZyzkdJXolaSRo0yOkImYdprs6D3kuUOMxnIVe9ovZ:rhJXola6rL5Prs6r1gsUovZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
674111331e4d3af6643a02ef60649f9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
setvm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE