DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
89ac7f13837c7138383b6e72a551c07d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
89ac7f13837c7138383b6e72a551c07d_JaffaCakes118
Size
507KB
MD5
89ac7f13837c7138383b6e72a551c07d
SHA1
1faa1a6df174ae0a08d06dd310566556acd86160
SHA256
9d72ae986ecaa2901f279b8e6a441d8b66909faabe52d946b25d3cda4045d32d
SHA512
8eabc5ab4b7d118f2173cd1cf2b8e63fc10e3a399c72956450ec2fb9d2eca1798ea9daad5e2695072963acf45b7f79156dc1506d8eaaf227de259327848fc745
SSDEEP
6144:XBB7jYaiKVkt0cigaT7vFQQT/z8H21takk1CHthFLdbmpzoS1uvLYNl9:jsDKVkt0jjdfKWthFLdb0zoS8vkNL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89ac7f13837c7138383b6e72a551c07d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE