DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eaf0ffb6ae5d2762134a3da496175ade_JaffaCakes118.dll
Resource
win7-20240221-en
Target
eaf0ffb6ae5d2762134a3da496175ade_JaffaCakes118
Size
542KB
MD5
eaf0ffb6ae5d2762134a3da496175ade
SHA1
46531110d2e24972a491bc7e16219e952c43376c
SHA256
a3308dbb2e5aae347b3af1dbb45fb0d831ba6569cead7a2bef9dc7212cd7b675
SHA512
70c5ca7e9119b41668ce45362a3d57a266c20df1ee5433a4130d61061698af72a20c3ce51d96263a72b38fd86d37c61599b4d5b089843fb3a8c1630507269402
SSDEEP
12288:VvyKABB/Lr2Uf8q0umNXGL6SCd3Q8mjWdh3JoFN9t4x:V6KWtHvDnLuAydh3JoFTt4
Checks for missing Authenticode signature.
resource |
---|
eaf0ffb6ae5d2762134a3da496175ade_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ