CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Behavioral task
behavioral1
Sample
d00dd8543995d3ba5e817c7ad73edb76_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d00dd8543995d3ba5e817c7ad73edb76_JaffaCakes118
Size
274KB
MD5
d00dd8543995d3ba5e817c7ad73edb76
SHA1
923d6c6dac66eb8643f315a111569aa4078f426c
SHA256
d1348cc6c831791a560b2eb8389b034babff670fc3827aec70319700cd9c532e
SHA512
221f6f4484ddf024e9321623cf4192b2e3cf27adcf177e50b42b991ae5efb9159d5fd0a4fed83a93baf46a5486a5a64d61bd444cccfc8fc9815d7ce0adb3b5aa
SSDEEP
6144:i6fvPAtjIV+GZkYzqH2rhQfGIGPfVRMtnEPJhE9eTkig:i6XPPVRZ82euB98Jig
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d00dd8543995d3ba5e817c7ad73edb76_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ