DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
a9adaacdf7df4ccb9d71d9216630b712_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a9adaacdf7df4ccb9d71d9216630b712_JaffaCakes118
Size
30KB
MD5
a9adaacdf7df4ccb9d71d9216630b712
SHA1
a49c60534b0f0523e0154b38db3f9de3dd6c22f0
SHA256
835b5cd5daaa7c152cbb51246526d3d62387171ae39836fc9754bce2f885339e
SHA512
f702ee04839e41b55d3ef69ae0aaa9ea9ac81936c5af1eed9465ce324e207bef5826ef90ca27e8a457616402b215f76859bb6dbdd594b131a854cf54b3f0f45e
SSDEEP
768:BoEBuD/KcFKZO6ORlitiS4KPHnbcuyD7Ua:Bo/icFK8Rl8qKfnouy8a
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9adaacdf7df4ccb9d71d9216630b712_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE