DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
8ae20f47a1291ed57262b0453621ce3c_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8ae20f47a1291ed57262b0453621ce3c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
8ae20f47a1291ed57262b0453621ce3c_JaffaCakes118
Size
70KB
MD5
8ae20f47a1291ed57262b0453621ce3c
SHA1
9d40efa6f145c09dbd83c5333ef5fefd3b0a4481
SHA256
605eb4d5158d7a924cdadae0a73c372c86c751032095aea6e0560b8d6ecc9aa7
SHA512
339bc4becfc80dc3e2559afffbb1c0c322c4e1e0ded939555af088b9e259c189a7d2ad124704efd8bb29e01b960f4baf21e9f67b19533447df0257893820fe99
SSDEEP
1536:E5s51jU4g+pqtPsbrffIE0r5FUFy0kX9jj3:E5s5GapfvffZ0lFqtktn
resource | yara_rule |
---|---|
sample | BazarLoaderVar6 |
Checks for missing Authenticode signature.
resource |
---|
8ae20f47a1291ed57262b0453621ce3c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
StrDupA
StrCSpnW
StrSpnW
StrSpnA
StrCSpnA
lstrcpyA
GetModuleHandleA
ExitProcess
lstrcatW
lstrcmpA
HeapFree
lstrlenW
lstrlenA
HeapAlloc
GetProcessHeap
lstrcpyW
HeapReAlloc
lstrcatA
lstrcpynW
GetProcAddress
wsprintfW
wsprintfA
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ