CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
SetVM
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
168c3d179a5f8e50621a402687b77d2b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
168c3d179a5f8e50621a402687b77d2b_JaffaCakes118
Size
270KB
MD5
168c3d179a5f8e50621a402687b77d2b
SHA1
4b625824908fbd6af77ce48b8efdb22404773128
SHA256
7f88be2c0a013afd9f1503fbeca0bd0ad4a40f430d45b36e548293103dd17d51
SHA512
588aa1a16589b8e22fbb63cab4df5ad42e2245947775816a2699403829853c581d4ffb3f38696e80248c105d8034905404c61987a7a150bfb34cba77f0ef5b4e
SSDEEP
6144:J3vnHJ75K6H5hEwL2N89uLZGWoaWDRXpvHaR+:J3v/VZhEwL2N89uLZGrNZR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
168c3d179a5f8e50621a402687b77d2b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
SetVM
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE