DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
71692f791df046677ea8a0c877b5fd7b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
71692f791df046677ea8a0c877b5fd7b_JaffaCakes118
Size
140KB
MD5
71692f791df046677ea8a0c877b5fd7b
SHA1
b05fcdb4eb198a5bfbc7dca3fd37f6052bdd185e
SHA256
438fff414ba43783f9bcb159bddd02a0b4c74671db646c7f16e7ddeb7242d416
SHA512
4cdfc978b7a455cbedf819f29088e734538dca9a39ea281081e74d4958cd91035b99066af8e5e2942e89026e2c676dcee12dbfd304e077281c425d5d43daad59
SSDEEP
1536:awMlmPuZc7wRJBuSeuD26E/iBxAfjXDzbVgwUaZvbKs2Wo:+mP77mJcutKfjzzywkBD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
71692f791df046677ea8a0c877b5fd7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE