CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
a14a450646d8f9d3d58856280c222c7f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a14a450646d8f9d3d58856280c222c7f_JaffaCakes118
Size
270KB
MD5
a14a450646d8f9d3d58856280c222c7f
SHA1
36a2b1cf6fee789baeb55870d137d881835953d4
SHA256
053ffcc08fdef8ac5911e428be2fc344e6ba6f101a27eedac3c418ba5d7d7540
SHA512
9daf36ae440f69445fc377ed9d7407a72e4cd1e6a39d4649b9789e5135e532f6e625d2e3e0f8906e81b1e9649174154799976e9ba3e25f973415c1b56134f44a
SSDEEP
6144:5fTSad+J0NnDFtLirKuJhzg6QZvacXpcaOG1Hl0HBEI6KP1aTsooDzi:ZTSad+mNSh3ovTfHkBV6Kabszi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a14a450646d8f9d3d58856280c222c7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE