DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ee8b010329f8e3cb890a911bbfe453e4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ee8b010329f8e3cb890a911bbfe453e4_JaffaCakes118
Size
44KB
MD5
ee8b010329f8e3cb890a911bbfe453e4
SHA1
9270f11992c371c1b70b2c165204dc8ce5287e9e
SHA256
5972b50f44398753b9983f76f8db26efc4bea64466e3ca3a27a44c64e6c01d78
SHA512
1450cdaf4831a2bf2ef450f8319c95e7428c2fac82ea7beace988e5d5fe7c59d3ea57bfa0269ba0dcb8077376e82dc6b67faa279d7885cb8355b335c584a8d80
SSDEEP
768:zEEZuCcrkQj2PU34+6yCzvDc8ljIzcf8JO8ljI:zUC1QaLdaIf8Jza
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ee8b010329f8e3cb890a911bbfe453e4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE