DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
86165e89b51ad16db8bd5a407c2cb778_JaffaCakes118.dll
Resource
win7-20240705-en
Target
86165e89b51ad16db8bd5a407c2cb778_JaffaCakes118
Size
6KB
MD5
86165e89b51ad16db8bd5a407c2cb778
SHA1
9c36628377113756b457b6d6a977e5b3f4e228b6
SHA256
6db2e85a75faccf4e2b2fe76a2a3dd11be03c2feb379fb2f52c640107a04a6b5
SHA512
cdf07607e6680f113971e31833edadb98e041a31dfa522f025ec84bb9f38d1e936c4ebf2fd268c05879ba60a6bc87f71aa226541599eb35c61aa793993f48a41
SSDEEP
96:hdaMU9BzMEoqmpd0yafUa2LGJQddecV8eZELBklQWq2sDaTrWCCfLdA:FUj4b8j2LoQddjMLBCQWqJauXxA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
86165e89b51ad16db8bd5a407c2cb778_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE