DllCanUnloadNow
DllGetClassObject
run
Behavioral task
behavioral1
Sample
54341744dcf5f3b50830d0258e61a124_JaffaCakes118.dll
Resource
win7-20241010-en
Target
54341744dcf5f3b50830d0258e61a124_JaffaCakes118
Size
43KB
MD5
54341744dcf5f3b50830d0258e61a124
SHA1
0117596eb90c41278d2e5498d0ff8a436609b807
SHA256
c0e39afdf86d6929ff7b2854e9192db5f3db3fa7c9cae6ee4a02cf83f9519cbb
SHA512
988c02796609c7bc9ba4ce685aaad76ba1cc8387bea2cadf8d468eca6852754c20d6ab0b3adb2aa4dd2c26f98fe10618c52e0e88f6ab050cc71f06e25edd53e0
SSDEEP
768:XODJkmUpHrvRSzKNQ19Et06wDf3Y7/qBwzSwijeiGXJtWe8uMFl:XODaTLvYKi19E7wb3eqaP2Nl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
54341744dcf5f3b50830d0258e61a124_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
run
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE