DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0c417bafbbb2e21c6208c75ef97611a6_JaffaCakes118.dll
Resource
win7-20240508-en
Target
0c417bafbbb2e21c6208c75ef97611a6_JaffaCakes118
Size
334KB
MD5
0c417bafbbb2e21c6208c75ef97611a6
SHA1
3a7f4027be6da79d05f4e635412c7ffec3bb1ed4
SHA256
aae0198afa1736cc3435935539b8d0f795a089eb44c2cb9594ddb05679ebd338
SHA512
fc95c7a5d755683cea37333b2ebf0a36f4b3e13f9fa9d48bb2e725950db621eccfd421a796262389b324fee999f190c5b65555be5cb51d21f78379d274bdceda
SSDEEP
6144:2+AcG9R2N+qxqpDHaKeRArQBiivJr/Do2/sjrZvSTBQVubIw1WFW0yBhAV:o4qpDHqJ/kZ3nwYJyfAV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c417bafbbb2e21c6208c75ef97611a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE