DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
710f5350d7b70898d3defe6afae77933_JaffaCakes118.dll
Resource
win7-20240708-en
Target
710f5350d7b70898d3defe6afae77933_JaffaCakes118
Size
670KB
MD5
710f5350d7b70898d3defe6afae77933
SHA1
d30b3c6400e0c852651c0aff7e08f1493443de5a
SHA256
cf09f32b5b056ed658aa40c169a6f0319309af6ece17eb730692d2f3da4dbefd
SHA512
9d4d29f45bf9ddd45c51ad7656fc52f14c6d9f3733fc3400bf24d12fe592ab9297fd5b1971c36a837ca9d085cf49afb544aa69451ff8b5e22cf6677b7d68b92b
SSDEEP
12288:yR3bLEgm/iBGxOseRIQe1ZwBBySSXaFIuA+yRwpIWh28kXAHMLte/wirAOg:o3vrYeh6GBvSq23wpIeFepe/wEAz
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
710f5350d7b70898d3defe6afae77933_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE