DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
8bdcf22bedd45366a957a16dbf82eaf1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8bdcf22bedd45366a957a16dbf82eaf1_JaffaCakes118
Size
2.0MB
MD5
8bdcf22bedd45366a957a16dbf82eaf1
SHA1
36088acec5bdcb666639a3a542ff21acbfc97e8b
SHA256
31d9564c9e6780ec7bad30128627729750418028bee8db2c2dca26653791ef89
SHA512
45239ed29e1771943ffb49d73ea6f442dc34f09316bb94dbe2867e00eb98273af484dd7010fbfa847e99c2f8c202cde577fd2f1cfb4f898308fb30b96ed2e03a
SSDEEP
24576:JIO/oUCqtlJAO6muuLwAY0uzYvYS11zhZ9yfUGrprh8QkUvXhu1:JFbWGo0uzY11/Z9yfFVrYUvh
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
8bdcf22bedd45366a957a16dbf82eaf1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE