DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3751c7400e86ea584699ab4643880f18_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3751c7400e86ea584699ab4643880f18_JaffaCakes118
Size
197KB
MD5
3751c7400e86ea584699ab4643880f18
SHA1
069fe9ad2e68d5c2582256b56ca0b776a32f5f5b
SHA256
d913565250e1e7d1a4cca8482c23884315cbdd764e27b992dcfb78669a7c28c4
SHA512
b79b3c71b1d339197902473affa0d9c4757e18b8a8be946266c2d82f0122042e67af7c617571b42733ded30ce226db3566ee24068e1b5157af4fb488036dc93b
SSDEEP
3072:IwCG5UMO1qYMmk8sbIQGvAfcxu5ih0vgwZY0PrZ1H:s/lqf8LKcwYGm0jZ1H
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3751c7400e86ea584699ab4643880f18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE