DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bcca43fe4004c92c4fa37b86c1b45f32_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bcca43fe4004c92c4fa37b86c1b45f32_JaffaCakes118
Size
408KB
MD5
bcca43fe4004c92c4fa37b86c1b45f32
SHA1
f01b8e094a18e69aa7e7eeb2f889d6c2659e2c00
SHA256
9e63d94504add02b1ebdeafb561dac41c886a9f299bdaec695545f36b895d26f
SHA512
f01961bd0319535a53d09a7fb07f0dfac262f589a40dc3fab77fd7af5b15ad1fcf82b2586469a8d89d092a9a3a697295441eef117540aa9055f81fe9ea69483f
SSDEEP
12288:YPE97KChNOnbTzquTt4qYzpN76P5tGP3V2BH:YPEhKChNOnbTttoNwQ/V2R
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcca43fe4004c92c4fa37b86c1b45f32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE