DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ad6e8daba9a8b48f29bd27a7c515f929_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ad6e8daba9a8b48f29bd27a7c515f929_JaffaCakes118
Size
38KB
MD5
ad6e8daba9a8b48f29bd27a7c515f929
SHA1
952e2e017865209b88c8c6c31ba0c1b587bf6b32
SHA256
84b49ae27d1d0a22670f189257c33b071fc3f4212e030b59ce77b0f4a4abb99a
SHA512
bdf6be188889585df1a7a7b73b485e77178bf0e9fda639dda4d23354fb3e3b01e7c68f18fdb1ee3cdf6a506b4bc63148d71998f855cfe95082d13f3ec14547be
SSDEEP
384:Kuqb9YCZBmWQ+mzkgnatK8wm4VL+0eQnajk3yNMWANcQW1j:Ku4fF4Jaim4MhWKLNacX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad6e8daba9a8b48f29bd27a7c515f929_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE