DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
682aa83e2dacf76e6a368101d89a5e08_JaffaCakes118.dll
Resource
win7-20240704-en
Target
682aa83e2dacf76e6a368101d89a5e08_JaffaCakes118
Size
1.2MB
MD5
682aa83e2dacf76e6a368101d89a5e08
SHA1
d2dcb8c7b97a8ee7fcaf1a0404362d58ffc43858
SHA256
44ec768aff9ff36ea9d73deb8d49001cfc8085f8c66247556e32c55753cd1a31
SHA512
d5abf4d9e6bd89b6bedf7b07c14b0bcc8f78a3451f213b82ccf22976ebe899ba4b0031d73d45d81d666994fc7e25fe597f2cd970b351ce2e76c5ecccdda4c215
SSDEEP
24576:J1AWit1zNEWR6gaQ+YEt+ETjuN7FIxxNPrIaID5:DA1zqWqDEWjc5
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
682aa83e2dacf76e6a368101d89a5e08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE