DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
e0cd04af76af2720dd847a518960fedd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0cd04af76af2720dd847a518960fedd_JaffaCakes118
Size
148KB
MD5
e0cd04af76af2720dd847a518960fedd
SHA1
24431205e875a061f8b39bd404b485d4cc77cd5c
SHA256
005a945d5edcd01c43c0b44ad4979fdc94a7026e3b9c6a53c9de61ae87b47186
SHA512
4c47d42121cc502a6c6de6064b0cb2149c9d00cb0070bb50cebd9c3b53dea905058f74303e12423581075f93265aecd52fcbecb1c083300073ca25b3f7e662c6
SSDEEP
1536:9tM4g7Cx0XhleRweGwCVOh4DiGpIdDCjp+QpLbTtmzJzhN3zueAx4bf7:xg7CxxweGq8iGpIdw+QpLbTtmxueBf7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0cd04af76af2720dd847a518960fedd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE