DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
67809353a4f1b4c7ae3e0b859acf965a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67809353a4f1b4c7ae3e0b859acf965a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67809353a4f1b4c7ae3e0b859acf965a_JaffaCakes118
Size
61KB
MD5
67809353a4f1b4c7ae3e0b859acf965a
SHA1
dde5489e06eb94623109809e8f3c883f3a042083
SHA256
b29f807a5fbca8af27ea5300fd754a314e1d774a3b092b5db745733a2bb5dc4e
SHA512
2c5d2db39b9b353ce7b2cda7cc32945736d4e9bfaaae8c1ca920f6409410f3c58b2422b1961cff8dc54ee7bb986e855155a047776ab62d9d1e2dc197fb83d107
SSDEEP
1536:8Prrs/kXbASSaXGKnN4HaGLuX3GmTeHPEs+sydMu5SMdyFC2nJ4ifWTjgN:qSobL2KyOSHJaCXWvgN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67809353a4f1b4c7ae3e0b859acf965a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE