DllCanUnloadNow
DllGetClassObject
setup
Behavioral task
behavioral1
Sample
8cc10cdfc0ee4a9c44521147948553c1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8cc10cdfc0ee4a9c44521147948553c1_JaffaCakes118
Size
49KB
MD5
8cc10cdfc0ee4a9c44521147948553c1
SHA1
4dac93a21acd7c3bbfad5a9c3accab6399bec6c3
SHA256
1665adbe8040e4636460b8f037d8839e2403f1b3376506cacb21ef67c14b0649
SHA512
174af79d67eae0f9e929f0df678484ac9d937b017d3e670ed7fec94ca2d58bbe546318cf5f44f39ef54d84d50c9f0c1833b6b09637ff9b2bfa186223210cb7e7
SSDEEP
768:/rtMWVsYJm6dx8LGA4xMtHzSrgyVu49TEhUOAwEMpC5vfJR3EGk:/rtAYJmtLG1AHE0TuOAwE9fL3ET
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8cc10cdfc0ee4a9c44521147948553c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE