DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
72e930772908e05dc0b97d15a2711f71_JaffaCakes118.dll
Resource
win7-20240705-en
Target
72e930772908e05dc0b97d15a2711f71_JaffaCakes118
Size
66KB
MD5
72e930772908e05dc0b97d15a2711f71
SHA1
3c18bb06cf4e96fae16dc0095eabcb718c22d4d6
SHA256
796bf2bec7b51ace05ccc6b7ab14137a53e8e59ab7186369200244aabfbd98f6
SHA512
fe15d06eee7a3599f7c7b655f589bc056289733cc9b0a12a456b34e8c9e69cbf04788892de94cd5d5ffc2b7a5972f4214bd74b02d11c0bdc59be3fc5244b26a7
SSDEEP
1536:9hFWzkSSaEIYRax853smFifWlDkhE/JZH:nFeZS/ax8534WlzP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
72e930772908e05dc0b97d15a2711f71_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE