Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
Behavioral task
behavioral1
Sample
37924cfe9efe604bef7b01291a7e1e9b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37924cfe9efe604bef7b01291a7e1e9b_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
37924cfe9efe604bef7b01291a7e1e9b_JaffaCakes118
Size
21KB
MD5
37924cfe9efe604bef7b01291a7e1e9b
SHA1
4524f406a237a81c910acdcbcd0d3e4043d1feda
SHA256
d8b57ed7bb0deded86abc8606e7c2bd85c04286a0a2de8182110b62d21a9ad87
SHA512
00afa44a0e7a7bae09d83665d6f54e5670a26064c35c39d3801f29ef0435ae02287cc074257dd0a4c3ceb48baf95789ae63fc23d85ef171d935ebea35124a44e
SSDEEP
384:JWPyKx3mVkCxSCExUOtEXcvBkAdT2jZgKuHTFu:8qwWVkCACExUO+wiAdStgRzI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37924cfe9efe604bef7b01291a7e1e9b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Activate
DllCanUnloadNow
DllGetClassObject
HookProc
Logoff
Logon
Start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE