DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MSACP32
Behavioral task
behavioral1
Sample
095ec05054fec1f1346caa7bf0f1c1ea_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
095ec05054fec1f1346caa7bf0f1c1ea_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
095ec05054fec1f1346caa7bf0f1c1ea_JaffaCakes118
Size
152KB
MD5
095ec05054fec1f1346caa7bf0f1c1ea
SHA1
6f154bfdfc8b0f2afb5567230eab808ce01a5851
SHA256
e73ebd2f86fb1db07da0b6dec4a2195f15c66e414669cb316f99e5ab13f27585
SHA512
ee72fb0965927e5d24a94315ac2b0977ba89fefe0f55961cdb2a701e33ede81974b6e4dd94a8b3fa06654d70d61eba2b364930dd733fdc3fc54522192cff3cdc
SSDEEP
1536:gqGYJiIYtTFhbaOn/M26MdQprR7kITiigVYkkO6dg9EXX9OJaGw6sXJ:9GuJYL/M2DYN772lVvZ6dg9GtOIGw6s
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
095ec05054fec1f1346caa7bf0f1c1ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MSACP32
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE