DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
07ec517c0f810138e72f6df25e087753_JaffaCakes118.dll
Resource
win7-20240221-en
Target
07ec517c0f810138e72f6df25e087753_JaffaCakes118
Size
1.8MB
MD5
07ec517c0f810138e72f6df25e087753
SHA1
f82b3c57b39a1098030a2b125ab7350b0f885bad
SHA256
95a6c6bafacd15c71e71d7c10e269c33de193a32525cf604ab6b9092da6588af
SHA512
f33d741f52e09d8d1af7b421f2ebf16f96a606e7307a9a740d73bde10bab68ecc8ec3e06222531aef0cefa86aa55d489744d13086474a3e285ff2c3921f7b6f7
SSDEEP
24576:YH+olN3i1qO3Vj5TrTESyjmNSLgwQ7bdY1YSdVdMr1fg25F1CWWeAks17vPX+:IbHqj5TcSyj1+bi1HdVyrJDF1CWWpU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07ec517c0f810138e72f6df25e087753_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE