DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0decc0ac50c874622dbcbe350998dcc1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0decc0ac50c874622dbcbe350998dcc1_JaffaCakes118
Size
930KB
MD5
0decc0ac50c874622dbcbe350998dcc1
SHA1
de2adc2786bf075b0a513200cc98b702ac45028a
SHA256
2cf908bbfae89c2956a21fe5d2b162bde1d61b46e1e3f34eb9401c66eaa47364
SHA512
cd270af5901b9d12ca5398e36abfd9716fd5f58ce2e8281d785cf6e8b5d4d59fcade1f400635fd17bdfd2e4d45e563592645a5106bdb6d45cc6b4b95fc040f3c
SSDEEP
24576:ViHA8ee/jlynPe3wRVgdHpBgnC1prPQrQRlMxwHr/a9OP:ViHPJyPegAHpr3LQsRPGOP
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
0decc0ac50c874622dbcbe350998dcc1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE