DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2f3941a308d37c683aa8feb74fb5d80d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
2f3941a308d37c683aa8feb74fb5d80d_JaffaCakes118
Size
1.2MB
MD5
2f3941a308d37c683aa8feb74fb5d80d
SHA1
e26269ff3332199617095567ac05f9da9d483624
SHA256
f8e3edcf7bf679097d065b2bf993eee3be30e2db17c9c5f8835788f2f113a20c
SHA512
ce83c7d354d588449233728fa4d21334a172140b91c5295092331860ff81ffb799a33356b81266bc92a8283ae514179dba06c2f1ba6ca7f6b5407a813d59a61c
SSDEEP
24576:jczx/2GNbKQpOeZGdynuPWk9yQ1kUCgoGly08lC:wJaMZNUpoWM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f3941a308d37c683aa8feb74fb5d80d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE