DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
271cb55dc31080dddf109efdde65c8d6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
271cb55dc31080dddf109efdde65c8d6_JaffaCakes118
Size
88KB
MD5
271cb55dc31080dddf109efdde65c8d6
SHA1
707fd2384ffcb5c33ec01dda4cdac08225fbe4bd
SHA256
e8412727f2ea0261a7a33518e2fe53776c427306135ec4db8e66e0a15fc4d8ca
SHA512
f91672243dfddc0b090bc0b485e736df7b293371c24d7269127d0b1e0c377cd5eaf37764e1135d717da0616510650b1191eea70fe29f59a35e56825546b14407
SSDEEP
1536:QkVNviLPxoJSYB0i97v8s1SuCBva3F4jm0:DNgxS7ui9hSuCBC3+B
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
271cb55dc31080dddf109efdde65c8d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE