DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5cae92106156347f98990d202354ae67_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5cae92106156347f98990d202354ae67_JaffaCakes118
Size
199KB
MD5
5cae92106156347f98990d202354ae67
SHA1
89c3224ee90729d72825717020c8443c75468b10
SHA256
1b18191c975b9944c61ffb1f2025604d071c8708a289c297fa2bebcd7309fb96
SHA512
a82bcf4e70a3aaf1969dd6460bfb68b86a251e080d0367fe3a877fbf0da7fbf5f2d713d5030ff970db80111de1b710ef872e26780717e7ae32c672ab81a476f5
SSDEEP
1536:nv99w0wvJNSD5wBNTTgQarThJjM5M6u9vQl9ICx4XnBZ7HyZ7GNRjJquCOXI2h0z:nv99lD5wBAPzYKS9qD7HqGNRVquhY26Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5cae92106156347f98990d202354ae67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE