CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Behavioral task
behavioral1
Sample
10e3d90b440b74e5e42f22aa0a182231_JaffaCakes118.dll
Resource
win7-20240903-en
Target
10e3d90b440b74e5e42f22aa0a182231_JaffaCakes118
Size
274KB
MD5
10e3d90b440b74e5e42f22aa0a182231
SHA1
bb1ed8291e61eca7e4600981e694fcc73f26551c
SHA256
0eddadbda8bfb27d678c3ddb011e29f5b456d95235329fe633acd94fba673bb1
SHA512
a156a84fe784904d5c332b744106242c549dd31920e0be1f63485f4a85275e54a44283b0706186797daf8b290913d05b9a22f7fee2a4de804d1efbc6a9a2c433
SSDEEP
6144:tqq6XLQS15jjIJ0ExN26OpFNaqncNccsKyx4bsCU3lOSQ/7w/c+:tiQSP7ExFecNccszWbsCU3lOSQ/L+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
10e3d90b440b74e5e42f22aa0a182231_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ