DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
b467793aa8d7d8ca3236dc999fdb3561_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b467793aa8d7d8ca3236dc999fdb3561_JaffaCakes118
Size
31KB
MD5
b467793aa8d7d8ca3236dc999fdb3561
SHA1
a943d67419992f7aa9a8ca38cb8b621fe2827ecf
SHA256
c599cd17044cf0eccbc217f4995d3a098dd47761235fdac3e812ddcfebebb666
SHA512
524dea0544ca4edcb0c9f06584d1d0fcb28e0139b0173b5d8efb6ea47cebd8f59a66bab6b7f19853cddf3e4a2d79860ad74fcecbe17f0eabbdec7b5d21847f5a
SSDEEP
384:LPxGLS0M6VRKFKFKW9Ze61yqm82/vJe3MaNJawcudoD7Ug:LJGu0M6XKXW9ZvsvJMFnbcuyD7Ug
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b467793aa8d7d8ca3236dc999fdb3561_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE