DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e84c993f97fcae07209fa25c1708fe9a_JaffaCakes118.dll
Resource
win7-20240220-en
Target
e84c993f97fcae07209fa25c1708fe9a_JaffaCakes118
Size
474KB
MD5
e84c993f97fcae07209fa25c1708fe9a
SHA1
0dc7fbce675e21965c9bb240e5d645ada269d998
SHA256
e8350ba67610e43f62e6f9e96654ee1dbee42a21b1b6fc34c389ad11c02f7960
SHA512
0741575b10c71f9ff078f0f231b1d4bf0b4e1a8d8dfc6c570c71a32c3a3eb9811e5b63e1f7943de7653df8bbcc82bb3722b8902a81914665480fef49c30980e3
SSDEEP
12288:2an7smQeoDC4j6TIPuJxfdmFpyplP/Xb9ER:2E7WvDCAOfDdQpyP/X+
Checks for missing Authenticode signature.
resource |
---|
e84c993f97fcae07209fa25c1708fe9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ