DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
758ffe24b6e91b7a83ada4c1ffe8d620_JaffaCakes118.dll
Resource
win7-20240705-en
Target
758ffe24b6e91b7a83ada4c1ffe8d620_JaffaCakes118
Size
92KB
MD5
758ffe24b6e91b7a83ada4c1ffe8d620
SHA1
5c8df07f67d890beeb9aa0fcbdfd3c03c09967a5
SHA256
07ffb16bcf9664fc0bb318751bdafc8c7ff5285e0072e493d5009aab6548bce9
SHA512
49a980ee2f9f0ad529cc0907661cc0bb6c113c3e7cacc638ff11676522b1bc165e58931ca7e2112f163636642d53cd18eb1136343150e04bba39ec980d127a0c
SSDEEP
1536:hFIOVNkDPzQ0iAmZNMNB7fjO0QCXUgigTjNvVjH4:hFIINkDP0rrHM7fQQUgigXNdj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
758ffe24b6e91b7a83ada4c1ffe8d620_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE