A5322A201615D4F509F8030242D8B1
C5F78100EBAE4D63B550CA5E8448E965
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_NotifyShutdown@4
_NotifyStartup@4
Behavioral task
behavioral1
Sample
fcba658a01871c3ef610df1b0985cad8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
fcba658a01871c3ef610df1b0985cad8_JaffaCakes118
Size
110KB
MD5
fcba658a01871c3ef610df1b0985cad8
SHA1
3648317580f149c9b29fffd000716c42e3b13cdc
SHA256
4947398e60185af3b06c76fe17a727eeeabd41b956ca7805154b0b58cb1a6e90
SHA512
69e5b9b6d0bffa7ac405bf2bc39660cb0998bff5761939217ecb835d9a07f1e0e92318581f1d4b18fd0cee31ba7647fd9223770ebc44d833c217c8c5fbb2101d
SSDEEP
3072:0evjWPA+mmS3mTup67p/OlvAMjnQoy2C:0evjCAJv3miK/wAqxQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fcba658a01871c3ef610df1b0985cad8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
A5322A201615D4F509F8030242D8B1
C5F78100EBAE4D63B550CA5E8448E965
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_NotifyShutdown@4
_NotifyStartup@4
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ