DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2d58bfd5abe43886c440760265fcaa85_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2d58bfd5abe43886c440760265fcaa85_JaffaCakes118
Size
93KB
MD5
2d58bfd5abe43886c440760265fcaa85
SHA1
71c9b837f089e6248b8c2f4425237ebd767e1dd3
SHA256
914d46b56342d6c5b80511fbfa739e476a5e83cf1752def312aa067141b14049
SHA512
9c11c370654359a1d3ec0896eaf018d63492afcbe8e101bba56dcfb52353b4121298e9085c2e797d5d8422b851d2603e5f4b69bca90afd32dcb342004c63d8c4
SSDEEP
1536:lnFSF3Qnz42AnbNU6F5BAnWdZi9THcs1KVW1lHUvT1o6rdI:pwF3acnbNNrKn6i9RKVW1mrxrdI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d58bfd5abe43886c440760265fcaa85_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE