DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
1500217cba64df990463e85e6b0fc087_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1500217cba64df990463e85e6b0fc087_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1500217cba64df990463e85e6b0fc087_JaffaCakes118
Size
67KB
MD5
1500217cba64df990463e85e6b0fc087
SHA1
6ffdf8ccf35fd8ef05922b571914dd948ad2699a
SHA256
c4fc036691ccc0bdfe7749a6e2ffd7799ae0247466a142a86f00559689884887
SHA512
0b2e1f9e035c1e6c09256053909dd3ed0f07fc71e0970aa07e47e7f80847bad09267ff55b1369d879da63eab77cf38b73c2a72f6589ae1ad382b6a28ef041fb4
SSDEEP
768:td3p2uFBmzBlYVGnFNroEjBLuoZWukGyYSM+b32ifUvLUAW9cn6ot5:td3p/FBgBoGnMEdSoZWGC32ifWX6oL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1500217cba64df990463e85e6b0fc087_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE