DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
542de524adf44ec00a0b95cd1169ac1c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
542de524adf44ec00a0b95cd1169ac1c_JaffaCakes118
Size
82KB
MD5
542de524adf44ec00a0b95cd1169ac1c
SHA1
2a67196ffc2a03fd090ca7245c05eabf9f7d5e1c
SHA256
f28b0e576ceeb88fc719717d41f61a4f6b86119b29f1a15da3bce09067bc3a0d
SHA512
c2067b8c366b9f00b3f822a9d5d6e7d5a0403d52badc7bedd2bb062143e026e24923e1a40a1f3ba18eab32f8e4a1f1305bdd0615d4d65469b2ff2cc471c63f4d
SSDEEP
1536:mWSmMFo9XcSMPmPsj693MXBa8JmfHWuV51wCJ730AtV1F:mWSmMFo9Xs0oBa8JmfHz5ws0+3F
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
542de524adf44ec00a0b95cd1169ac1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE