DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3a593b5f31a048c209fc36d4522b48bd_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3a593b5f31a048c209fc36d4522b48bd_JaffaCakes118
Size
193KB
MD5
3a593b5f31a048c209fc36d4522b48bd
SHA1
d56bac2eb589ac2e0918db622b4cb5ac00016b7c
SHA256
9c5e40dd242529098c5cc36c72ded611667db3ce418b9ce6cd112fa2f4ad83a7
SHA512
6409886691dc0adf5ee5c8e1e7d7d72747315ffe9ee7fd63237d2dfec295d807e5a4012b0fa1529b3e518de0cd0c6b39328ef8c629ba2053b3270aba23a0f721
SSDEEP
3072:HP8rMByJjOH/bRXWJ2lYGscSFOldt4uaIrr5Pp:Fk5OfIcSca
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a593b5f31a048c209fc36d4522b48bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE