DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
745c1063792c1f5393a83ae1b25ecef2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
745c1063792c1f5393a83ae1b25ecef2_JaffaCakes118
Size
446KB
MD5
745c1063792c1f5393a83ae1b25ecef2
SHA1
ae7862c7bebc32f657aa95ef3facf0d69aa16803
SHA256
a095fad8218b01eada209c435b65c7a0eba9b4d47de01e3f914cb35a5229044d
SHA512
c5b76e4f95f8aea3bf38b5f716d19fb7d9fbf1db94a3dec51e2e4678523381450f5c52b28f0b8512cc38b41835d2926421bd18b6ae3b66e8c6a2debfded314fa
SSDEEP
6144:gdZ9JQVfUp/BkHSZ+AzVtdPlNB0F4qHdCUIIDMDQYq1ggHEXa:gdZfQVfUp/qHSbdu/IDHTXa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
745c1063792c1f5393a83ae1b25ecef2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE