CreatePProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVMToolTip
Uninstall
UserLogOff
UserLogOn
Behavioral task
behavioral1
Sample
2d5f9c41fd4925343a580edcf250509c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2d5f9c41fd4925343a580edcf250509c_JaffaCakes118
Size
163KB
MD5
2d5f9c41fd4925343a580edcf250509c
SHA1
7fd7d438241048fd5f10f99fbf1810816ab92a00
SHA256
ca4093c308e71a6ee0bf59b72e2c4e8c0116472e8920943b4549a1f35bb9fb3d
SHA512
c7ff6f1112d92bf96d44dc92cdaaa8d311f6762ae54b52b04ece46f8f0cffa979c585ac9e3c7fb588a6a241cd8bb58c06c41ea62fc4403ad055b8ce7c0f25f85
SSDEEP
3072:5VdY1p9s5WZyHPH7t76L63c/tNWUR0SeWDy2F035v174OufspMFaVI4g9b/ML+e:5V+xsWyHP8Ww7WMTeWWX35N0Oufqd0b4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d5f9c41fd4925343a580edcf250509c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreatePProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
SetVMToolTip
Uninstall
UserLogOff
UserLogOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE