DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
02a0102d55ac7570874622970fef36f3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
02a0102d55ac7570874622970fef36f3_JaffaCakes118
Size
65KB
MD5
02a0102d55ac7570874622970fef36f3
SHA1
d67d4ae2ed29f5adbfb59cbca135e69a3680512a
SHA256
e9b03410c1d9781b6512089b2afb2f5e22f734e3f10a8e4b7992f1ceae8fa73b
SHA512
6cfe8bd27ed3739a2387aa00168e6ede9ceb44804f8636e9daccc37e01acdb0d3c925091df02d05cdedbad0e0b67c3877a88dcdec5db31f854164c50dee556bf
SSDEEP
768:lfIdCwanG27K2NK7xDPxuj7aeUhhbNbG/MT5WRHvHYQzMkQx:lQIFCuqJbY/vHYMQx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
02a0102d55ac7570874622970fef36f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE