DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
0f779be0e11047baf647a90eef032d3e_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0f779be0e11047baf647a90eef032d3e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0f779be0e11047baf647a90eef032d3e_JaffaCakes118
Size
66KB
MD5
0f779be0e11047baf647a90eef032d3e
SHA1
c679c6422505b8e7b0dc80b2f23a1b8bb5886bf2
SHA256
771870e2699dfd1e9fb0cb55b2ec90edf0b625052367a74f3ecc5be5d32530a7
SHA512
ad58793be4b2a6b42d80344c27f8b94be8bb1f3945eeef3126eff16b06ea4261ee86bc5bc3a9ed830f3b1ef36bb4fd8dcd3b2d292b3502aa5bffbc2cc72a3f81
SSDEEP
1536:9hFWzkSSaEIYRax853smFifWlDkhE/JZK:nFeZS/ax8534WlzC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f779be0e11047baf647a90eef032d3e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE