DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2b0aa27f7d9b7df65f3ae217b4f91c0e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2b0aa27f7d9b7df65f3ae217b4f91c0e_JaffaCakes118
Size
1.3MB
MD5
2b0aa27f7d9b7df65f3ae217b4f91c0e
SHA1
832822d1b6c6d2ef72b282f16f3b652ddd7c5e81
SHA256
1c0e88c8fa15f3125dc58421d1b274392731c1dc54f372b50041adebefdac4fb
SHA512
e49ff2a94fff8daa19d3b98ac6657b7f933c14d38b46ef17ed75201c2afd640daa958f51bbeb25dbb7459b79697ea13e1df942d3c9899e77e5e5cbfada30a626
SSDEEP
24576:WV7LZUE38rT/rzyzUbNbDW/HOnFu3goxrwzGEApLR/DsxQnriDCfx:yLZUmeryibC/uFcgkEzJg9sxisCZ
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
2b0aa27f7d9b7df65f3ae217b4f91c0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE