DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllSetCLSID
DllUnregisterServer
Behavioral task
behavioral1
Sample
eb5d87a42b9fdfeb0b0da157c10abb78_JaffaCakes118.dll
Resource
win7-20240729-en
Target
eb5d87a42b9fdfeb0b0da157c10abb78_JaffaCakes118
Size
63KB
MD5
eb5d87a42b9fdfeb0b0da157c10abb78
SHA1
0b6be1e06a43187f21504d44a13c7a92331ae2d6
SHA256
a063905ab70e707bd9f2b824f392ac3fe1e25e9b5f6d4c909b5ebc959edc18d5
SHA512
470ff74591f3f31843871e913c0a4e7c143b5a0fe5cca6d444dbed79278828b3959fd173203eb5543d2c719e50a792f08517951e717a5d949786ad96f3a2b32b
SSDEEP
768:0LwVb0r73xoJa0MLnMI5T0B1DU7+/Ib8fmetwmcPb:703xnMI6DYh8fmet
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb5d87a42b9fdfeb0b0da157c10abb78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllSetCLSID
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE