DllCanUnloadNow
DllGetClassObject
Ckcackc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
384508cc576636a03cfbc01c8e91db58_JaffaCakes118.dll
Resource
win7-20241010-en
Target
384508cc576636a03cfbc01c8e91db58_JaffaCakes118
Size
216KB
MD5
384508cc576636a03cfbc01c8e91db58
SHA1
3a433fd073d94cf4601dd61cc11953cf7683024d
SHA256
b7f8cdf42c353bce40d3b39043de489752a3ded3bf9997d019cb8baa8591d7c2
SHA512
681ea1d09de9b1c876d240f09124296f6e3b9c75055ab322f707833044a8dfd3c4e2ccf40cdd4c644a46a01b0b0816b34533dbd9caaab8366f2fa6cd08eb6264
SSDEEP
6144:Hhrl1NWPLfVYF3xqEhNR7mYd+Y2oSNOgU:7jWjVymYotoSN+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
384508cc576636a03cfbc01c8e91db58_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Ckcackc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE