DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
da1ffa4681ed0f1d8bf882b67ec4d78a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
da1ffa4681ed0f1d8bf882b67ec4d78a_JaffaCakes118
Size
55KB
MD5
da1ffa4681ed0f1d8bf882b67ec4d78a
SHA1
7ad04e7bc8cf5d6bd6532b6b77041b9ba3d4310f
SHA256
b73a7b5a0c2373214893d28f3fab9649196bb80d1b7dfced29dc6e250b45cf3d
SHA512
5c99cfddd1f6cf67ce17c98b617030d809aa49d392c92e58c64ae6ea35f344d30bf1f7673da83a9ae8023173d63ad059115c3066a25bf8394b59b7add715d58b
SSDEEP
768:gXmpbG7ttNdXiCxvufoDJOLd/Cj/VsdBfNrYj/y0Al3p3f4xz:gk4/NdyC3D8wBsdjrYjKTN41
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da1ffa4681ed0f1d8bf882b67ec4d78a_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE