_DllMain@12
do_work
do_work_ap
do_work_bk
do_work_dw
do_work_ec
do_work_fm
do_work_go
do_work_ls
do_work_mg
do_work_pk
do_work_sh
do_work_sv
do_work_tz
Behavioral task
behavioral1
Sample
af055f8a1eda457ed21316ddf8e02a56_JaffaCakes118.dll
Resource
win7-20240729-en
Target
af055f8a1eda457ed21316ddf8e02a56_JaffaCakes118
Size
74KB
MD5
af055f8a1eda457ed21316ddf8e02a56
SHA1
0ec4500145c3e45844ac9e59138dcd34372ffa6a
SHA256
80427dbb254872c048a6a59072ed1a823c9020178f84c6f6fd01ec59bf379222
SHA512
8730fa51b8012bc7e25d690bbd4269ec540e0fb92b4610c1d95b288888835f8dec6e6d6eaa77128af758a68b62a10cb9916cce6b0278d83f24751046d5a7397b
SSDEEP
1536:XftUxSZBAw12gWB4ESxiDx6HBdOLYJOi16NBKzLw3BdheaA9EVt:CxS01gE4txSyJOia39eauq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af055f8a1eda457ed21316ddf8e02a56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_DllMain@12
do_work
do_work_ap
do_work_bk
do_work_dw
do_work_ec
do_work_fm
do_work_go
do_work_ls
do_work_mg
do_work_pk
do_work_sh
do_work_sv
do_work_tz
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE