DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bdf283c77deae3475f2a540b3a94f03e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bdf283c77deae3475f2a540b3a94f03e_JaffaCakes118
Size
335KB
MD5
bdf283c77deae3475f2a540b3a94f03e
SHA1
0765bfaa0ba87c8489dfd3113be03bb6658e6ce7
SHA256
f82278b7e0221af0040e91b72591f442f071c02d39ad253695b87470aa6c3922
SHA512
7081ec46952f068abc0faa36c6e85910f0127d2bbd7f0c96824ca2ff0b23581d86dea29a48757d5a83f1e9c199fd478a7437bdc932fdf111ec1bcdb4b85d00b8
SSDEEP
6144:m4YVFTv3VBwlHl2LApfkqt3exhRwLCk4kxtn0XQWbDAywlGDnDwbTa:UTioLAp3peLeLAPXQajw6QTa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bdf283c77deae3475f2a540b3a94f03e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE