DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
4cd8114d1cb00f0d2c8cdf17609ac200_JaffaCakes118.dll
Resource
win7-20240708-en
Target
4cd8114d1cb00f0d2c8cdf17609ac200_JaffaCakes118
Size
35KB
MD5
4cd8114d1cb00f0d2c8cdf17609ac200
SHA1
4a1caab62cd32963a0916297a2de533604bc86c9
SHA256
946c397242d0d61ffeca1988e3f8ff41ec53264b58e2ae4e0d12b13c9bcbbf54
SHA512
7e7ee56ad62e6b1709e754f1a8bdcceba15276dce0610fd0cc36320b83d8cc19125f7a183d79e8500a8962f815e128107db8daab88e443668697bd3634f27b3a
SSDEEP
384:N0T5yshl6oW9Koysxp1u4NB9eW3fhUaNJawcudoD7Un:jKlqpy0p1u4NB9J3p9nbcuyD7Un
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4cd8114d1cb00f0d2c8cdf17609ac200_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE