DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
42561ef461d7093eef88c0d25ec492a3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
42561ef461d7093eef88c0d25ec492a3_JaffaCakes118
Size
373KB
MD5
42561ef461d7093eef88c0d25ec492a3
SHA1
6e55eaad763d5ed165cb073a44719915fd8a3e04
SHA256
abaf72b7c1d66ba500f6204733fb5a2114067479b6fff2a56f7df138373525e0
SHA512
4604981eedbb28edc8dc3ab4e4d3878f45db8fac060222d99c0a572267bc948b2972ef061ea8bef7e5f6f523547e5776e0987aa0308ae4f3126c092600e7e069
SSDEEP
6144:giefuAm6g9bvRJYesmRfzBSzNe3wQqrUKUQO0EfQw/EseOoGVYhw:gS9/zqegQq4NowZZYhw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
42561ef461d7093eef88c0d25ec492a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE