DllCanUnloadNow
DllUnregisterServer
Behavioral task
behavioral1
Sample
183ecb7102f7d69c5b1dfbbd478ffa97_JaffaCakes118.dll
Resource
win7-20240903-en
Target
183ecb7102f7d69c5b1dfbbd478ffa97_JaffaCakes118
Size
69KB
MD5
183ecb7102f7d69c5b1dfbbd478ffa97
SHA1
f88f34f13a4b05abb894dfc3c316abfb52c6a9cd
SHA256
e0b977cf048757bdabd1e2e0fec58663af7e52409ea02fa9b05f643666f9e7d0
SHA512
be6f8e433e8ffcc2e8d1c90c9c9d4af974ad1d18fed891baad5b366ca09aac4ac1ae1b85ed3e84c32045f27e0fd462eef9e359e47e4ddd7cc1bfa10283f74458
SSDEEP
768:TzTwe4dIoze0LgpSkSPyNyhBtx7GZHzHCRepUK5gQ6/e7:zwLdIqUpQaNCQZHWRJK5Ie7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
183ecb7102f7d69c5b1dfbbd478ffa97_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE