DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
2ab3dfc59fe7e8cc382a12499dc48d98_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2ab3dfc59fe7e8cc382a12499dc48d98_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ab3dfc59fe7e8cc382a12499dc48d98_JaffaCakes118
Size
62KB
MD5
2ab3dfc59fe7e8cc382a12499dc48d98
SHA1
a167628ae8b5c20abc67e9fe1620e46926ce4130
SHA256
faeeaead7a08444c696c21825c1a93042f2cd7b8e83125198a85ca22183d0e02
SHA512
9948e5f9d8cb1e71243102334468f3a567537722c7bd10dc694a1cf8e487bc0dbed8409a29c1d2d9609a47e3be6af89c8dc6f9e2592d7e1b35e7ead05fa5c3cb
SSDEEP
1536:90gYxJs6md2GQQ/XufcLDHlgQIcaX2nJ4ifWT5J40C65r:rYAvdJvXuZQIchWl9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ab3dfc59fe7e8cc382a12499dc48d98_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE