DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
7695cf2fbbea06658aca98de9c7d8371_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7695cf2fbbea06658aca98de9c7d8371_JaffaCakes118
Size
67KB
MD5
7695cf2fbbea06658aca98de9c7d8371
SHA1
ad1bf668e37dcb7daf24c062d060db3e42ee39fd
SHA256
2e0c0f11945d32153a27400c8a0b873053556bc4a42da99a15fe66cbd849f320
SHA512
5a0d89ca66a7464cc0b9a38e9c9e3df0de0fa1cd3d39012f17fad8f664c07440c29b90ec95268bc4eb3bce4a55d791dc328dbb208c45b05db4608043f0acdfa4
SSDEEP
768:td3p2uFBmzBlYVGnFNroEjBLuoZWukGyYSM+b32ifUvLUAW9cn6oth:td3p/FBgBoGnMEdSoZWGC32ifWX6of
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7695cf2fbbea06658aca98de9c7d8371_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE