DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
4b310682f9a72248788c96c0d9e610ff_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b310682f9a72248788c96c0d9e610ff_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b310682f9a72248788c96c0d9e610ff_JaffaCakes118
Size
67KB
MD5
4b310682f9a72248788c96c0d9e610ff
SHA1
50581d3d2162929045329301e0e0dd5c71ec7a41
SHA256
654141c72be99afc54702725f5a09e3a442dd6a7982e6231e12ef3d1e6a3178b
SHA512
ac614fd021717cef6aafe06ac4ef3f33b37b10b9c32cf59c90f30d06f89932cbe515c48d2adb07a87c4f0acb27f868f254f0d9ee8d5412437df442de8be29df0
SSDEEP
768:td3p2uFBmzBlYVGnFNroEjBLuoZWukGyYSM+b32ifUvLUAW9cn6ot5:td3p/FBgBoGnMEdSoZWGC32ifWX6o3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4b310682f9a72248788c96c0d9e610ff_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE