DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
185c30da84d7b2b53e71ac30b060c360_JaffaCakes118.dll
Resource
win7-20240611-en
Target
185c30da84d7b2b53e71ac30b060c360_JaffaCakes118
Size
198KB
MD5
185c30da84d7b2b53e71ac30b060c360
SHA1
8830a1efb2d461c3ac5094c431c690810a2d55c6
SHA256
9d35a1c53ef8e44741aaa1a1ce858c5b65d26579593c69a7c5adf0ca228fa7a6
SHA512
075d060a5bcaa2706b5b196d9ade64955ba1acbb61b9238bed226db53cb3139bb65cdaf597c991a00b8c5a13638a9e69245b74bcc1575bf594d003367a9283eb
SSDEEP
1536:wGFCYaBNAolWUSTCV+uan1Q58eubAp7/lk4o1AeqnooqhRLFlX9hmiAuCena7icz:wGFJfocUqf1KsydkbBoQHX9hAuxenz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
185c30da84d7b2b53e71ac30b060c360_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE