DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
17c4c4a49e96b3a697fe559a3804475a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
17c4c4a49e96b3a697fe559a3804475a_JaffaCakes118
Size
671KB
MD5
17c4c4a49e96b3a697fe559a3804475a
SHA1
cb214b099cb82ba38b2c95064c8edca3e98602d6
SHA256
f448f96b8d30ea56994903e9e42fa8dc2ed9e875d65ba2ee6a1ef7b7294d3040
SHA512
f0681f674ae1c382010c890483d5134f611a42e7d4f7ae3bef8585ecb9ea7875e69a88a1c36d3131d22d9a5db7f55f6d88d969800fb21bcf8d76e6015553b003
SSDEEP
12288:ZumkiK7Chg9MYgUXwjKpYa9hLcpS8qGECF8pr4DQFu/U3buRKlemZ9DnGAe9u66K:nd/g2Y3Ala9hL/8Dhu6c/Dte
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
17c4c4a49e96b3a697fe559a3804475a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE