DllCanUnloadNow
DllUnregisterServer
Behavioral task
behavioral1
Sample
2a72f960a0181fd7de5aac670c91e55c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2a72f960a0181fd7de5aac670c91e55c_JaffaCakes118
Size
56KB
MD5
2a72f960a0181fd7de5aac670c91e55c
SHA1
a54f65730dc681148f2a559a85b38e8be78a8823
SHA256
eab2ef657ca31b841ebfff21cc8def86ab5c84d4079da6501006df41c62c16e6
SHA512
18159eb4419e2d64835244c8f7f9c141db78fa95d28059d30827988fb02961eb5259dc0bbae92a0d3a6d234db605cf180c40a58b466d522a40c9281c42a13d35
SSDEEP
768:TLOKaGd+upzeCjgpSeOg7QFDWLV/Esx1djTaxKoH12hrso:P1aGsu/cpfODwJ/NbjeYomP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a72f960a0181fd7de5aac670c91e55c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE