DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
3ec11b5e39244b812c3f8c204302aa98_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3ec11b5e39244b812c3f8c204302aa98_JaffaCakes118
Size
36KB
MD5
3ec11b5e39244b812c3f8c204302aa98
SHA1
40ab4e61e0eb3d4cf9aabd1de605c998d7f70c6e
SHA256
8ed157a5a0c95b91ea5a6fccc85120acd420376760cac28511997a38b52a6a8c
SHA512
6f5182528035930fc66ba1d2506aadd578cd43a6365395d78e23fddb556435b8c543bb04b971eab7b0b19fb39568154ce13b585e025ef47eef24541626045721
SSDEEP
384:PhnXF7G+IF/75Zh0qFm6jeHoskOuDrV+noG:P95G+IFtZ6MmYeCPDh+l
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3ec11b5e39244b812c3f8c204302aa98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE