DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
658a23c3aa201c04c8de874dc0dc865f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
658a23c3aa201c04c8de874dc0dc865f_JaffaCakes118
Size
400KB
MD5
658a23c3aa201c04c8de874dc0dc865f
SHA1
c110dda55b0ff4c5f5ccb364792d95aa6e05d613
SHA256
5fa0d7126fa34426ab0994c7bd3627f72d6798306bf91f806493ffa8abddce24
SHA512
b180a02a4c7302e491916c7e4137a11edd6ea19297451415104f8c0bb1b7016e2dbcf722652a6f8b7084a0d38b4f310a911fe2efbbff205ae5347f82810da837
SSDEEP
12288:LC3aGYUQ6gUSwcNA3OuMVqN6DZh/wi0NFoOt:LC3/Y8SSV6Dn/z0MOt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
658a23c3aa201c04c8de874dc0dc865f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE