DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
6f2885766f2a24a2c550a4e993c936c8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f2885766f2a24a2c550a4e993c936c8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f2885766f2a24a2c550a4e993c936c8_JaffaCakes118
Size
188KB
MD5
6f2885766f2a24a2c550a4e993c936c8
SHA1
347f5b2f260e5cfbf8406f184909585df71edb56
SHA256
97aa8b546345e370c7e59d3d9ffa14e544767be50303c9aba2121cb61b25c412
SHA512
102930bf10cc8a0a6a75b4fcb9f4a44daa2e0d558a8810cf715e9110b4731029a7b779fc339d86e3dd18ead6e49b9128fa50ac9dad6816ed666095c8412c050f
SSDEEP
3072:3TGodudPq7wSqEuQELWCnoqjrEZ/s4TKilYfedDCtBXjOQY/aACDXwk:3La8wNDS47jrEpnOedUznY/zCD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f2885766f2a24a2c550a4e993c936c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
GetSystemDirectoryA
DeleteFileA
CloseHandle
CreateFileA
WriteFile
HeapCreate
GetVersionExA
ord57
ord18
ord15
ord16
ord21
ShellExecuteA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE