CreateBandiVideo
DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServe
Run
Behavioral task
behavioral1
Sample
c13da78e2968c3a52d2fc10c936d36a8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c13da78e2968c3a52d2fc10c936d36a8_JaffaCakes118
Size
12KB
MD5
c13da78e2968c3a52d2fc10c936d36a8
SHA1
8812654f47a69f1a009a4284d92ec7f258f50047
SHA256
254c4cbd7473490cbb99fe2ff375a7c67cc38944093c489d023f090f4058d4fc
SHA512
b70c5c2b811e7946dc175e3bf046a2375428a6f621247d31e621f671c05614b5fb7587d3b3e5fa0bb1dcf31cef088110a6351ea30bcd41ef963bb679c509505f
SSDEEP
192:bLgDtPbdUWMt+Oem6cti7OJDoP8jCqn0zrXq78ESFJTzLZR1/jO02aAMl:bkDRUHs5WC4WQsFNz9Lz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c13da78e2968c3a52d2fc10c936d36a8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateBandiVideo
DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServe
Run
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ