DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bf804f994dd6dad0f11a04a8d97cda30_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bf804f994dd6dad0f11a04a8d97cda30_JaffaCakes118
Size
48KB
MD5
bf804f994dd6dad0f11a04a8d97cda30
SHA1
b4cdbcc2d313840f31ab0b6a0943a7c944701a80
SHA256
8414251c7b2df528b26e8a911527527d94db53268fb0a8d29c44ecd7a669e91c
SHA512
326573a24c9e328b076857538112a748c67d76a6b7351c3be5f9d47af9bdc169e9e32d0923175025b9d1c40d725f4db907b53cb70fab31da8db46ea806d86913
SSDEEP
384:8BtKJy7i2lTAvR85TV/5JHfybKsoFEuHjzH7lch5qwRV2Z4JcINcJyXpvd6hCH:M17flTAvR85TFDKoFEiXblcx2i0NCH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf804f994dd6dad0f11a04a8d97cda30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE