DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
63e50e34853c6eee28ab1c68ec046117_JaffaCakes118.dll
Resource
win7-20240704-en
Target
63e50e34853c6eee28ab1c68ec046117_JaffaCakes118
Size
856KB
MD5
63e50e34853c6eee28ab1c68ec046117
SHA1
04d976831c52223dc4d47b96c0753054eb95b93c
SHA256
5b6ff6f2b1abeacd197b8548ecb68e6c3f3ad1427966afb40fba7899c1d8c99d
SHA512
92e07c141ecb56828e3e87cf6dcca829d989181920db65bd7d6050f5b8c1b95974bb92cf84809e4feeee70f77b6ef747ad508da4c43e6b75e798695932520537
SSDEEP
12288:bZV486F05pl6KcgrN28/TYi/mQ0PGe2RG72R9ULBPD1czXWXTtn5L:bvR5pl/HLmpPGe2c72R9UFPGqz
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
63e50e34853c6eee28ab1c68ec046117_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE