CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
ac7f36aaef13a9ebc69f0ab25e0e6787_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ac7f36aaef13a9ebc69f0ab25e0e6787_JaffaCakes118
Size
270KB
MD5
ac7f36aaef13a9ebc69f0ab25e0e6787
SHA1
9eaf7802227c9d64faa14dda7cdacc1b7a958670
SHA256
feadcbe4139c9f27e36c00d0974fee16e7234a6ade90a657f39a1cab30f0df1f
SHA512
a0ad680565ce33911ee4f5897feb9d9980723da6d2e16f50e4847d70b7e621498a36d6862a6d9ff0fe323a98f91f89a1a575ecb22bc82f95cae803b433cac077
SSDEEP
6144:HSHdHlQ925nKO1zlhJn8ibmdRRy/VRGv+fyKq+bu:HSHdW8nKO15HnLbC6/VuuDq+bu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac7f36aaef13a9ebc69f0ab25e0e6787_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE