DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
8a3d05db9ddcd7c1f0fcb02c8f347d24_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8a3d05db9ddcd7c1f0fcb02c8f347d24_JaffaCakes118
Size
62KB
MD5
8a3d05db9ddcd7c1f0fcb02c8f347d24
SHA1
3c133792665883670b07d91c1dade50091041677
SHA256
415e3fb0b5b6743716f1740e8abe2ed3a293f084c019f45770f0483befbb2f2a
SHA512
db9e3a193642bae81bbee48ec2c7f07c756625947d249461fe9c6e4317813dadd13dc75383d8b73f017d0e2b976d375142cf9df8423b0debfa0ebd89645b8044
SSDEEP
1536:VSlrD3vPhhYAVJEKMz+s/2nJ4ifWT4Blo9n/:qrPGDzkWalo/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a3d05db9ddcd7c1f0fcb02c8f347d24_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE