DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
fc3212ededaa617f9fc140e9d444bcc3_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fc3212ededaa617f9fc140e9d444bcc3_JaffaCakes118
Size
93KB
MD5
fc3212ededaa617f9fc140e9d444bcc3
SHA1
07ef8bd0ebfb2ac71dc5e871f87692f3bb0acc7d
SHA256
44f8ef210abb88a1c3a26e444cecc570479b96ed096e1fe3da153e5e74fe8825
SHA512
1938c539abd5c41217a74fda4e0a9b94dce8a4ca8e589e9dc4071911032f419a6486ff5c995f2d6d7529f9b5c2e68671e72a407d6f9907a6a0bd1d2577063ace
SSDEEP
1536:u4q0Fc7WKmT3NrzJ/1VQffbABOKfsG1GB4EeO:BquJ9OffbABOpyGFe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc3212ededaa617f9fc140e9d444bcc3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE