DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0df9488faea1e8ee850ec8d912d63dec_JaffaCakes118.dll
Resource
win7-20231129-en
Target
0df9488faea1e8ee850ec8d912d63dec_JaffaCakes118
Size
2.0MB
MD5
0df9488faea1e8ee850ec8d912d63dec
SHA1
f1e0074c0c10cdea74c6e81633fe9d1a1ddd1704
SHA256
8b9121c9539a60e301481c38125243d97f98afa736676234e012470b2d6f7c0e
SHA512
316b186d50230bbfd0afb71222460c7af089b08b0465c64e4b3c26df466746701e48915c77d50be3c67dfe703ab442fb1d0006f7ee9fb22e2439d44a1e5d1710
SSDEEP
24576:jh/fYV9J+1fIOZJh2MW5gNY0W6YEY3b1NdhQBI2ZHJCcRqeyeGEnj7RAoN:ForO/sP0W6Yzr1Nd6bZHWey/mjaY
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
0df9488faea1e8ee850ec8d912d63dec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE