DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
4097f074a964a8b3f16291663d3128a4_JaffaCakes118.dll
Resource
win7-20241010-en
Target
4097f074a964a8b3f16291663d3128a4_JaffaCakes118
Size
187KB
MD5
4097f074a964a8b3f16291663d3128a4
SHA1
6a469f93c34c19fb599dd2ac9cc71df277c684c8
SHA256
b04b790f2d6aa21dbd532522ca290154986c00f96b4cffc408cb01ea83b15e8d
SHA512
ff042b4ae2049c18f3f51d5e61297c59cbcc27583bfb78382f560fad2078deb3c8126a2ac930928d229833f10ca7f18de94ea05d7bc644861c45c9cfb8f3a1e0
SSDEEP
1536:de9sSffv8TLImmxnXTHJKFaq1k5D3aZYMybvlCe3ZfBnWWcD2QU5DA57F6uCu3Rs:89NfOVmioblqKtCPW8U98R6uB26wS2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4097f074a964a8b3f16291663d3128a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE