DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
f6ec24261bbd4d65270e2a2a758a6a28_JaffaCakes118.dll
Resource
win7-20240729-en
Target
f6ec24261bbd4d65270e2a2a758a6a28_JaffaCakes118
Size
66KB
MD5
f6ec24261bbd4d65270e2a2a758a6a28
SHA1
d715bb45fd24213edd9091c216940d9a9bbea29b
SHA256
95966d47fc38dfdb98e4aba46d3f2ab35b18e5fbabc6ce0d8cb9c0581d08065d
SHA512
506ba109299a534053c306b3f54c060e07b35aa43855b0a4acbddf86a2772a31e04aaeed9269e856e10573c6701db0b33a2f0cb69df8e08342485278248acb41
SSDEEP
1536:9hFWzkSSaEIYRax853smFifWlDkhE/JZJ:nFeZS/ax8534Wlzx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6ec24261bbd4d65270e2a2a758a6a28_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE