DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ec57776a27143aab43a70e503eede12c_JaffaCakes118.dll
Resource
win7-20240215-en
Target
ec57776a27143aab43a70e503eede12c_JaffaCakes118
Size
566KB
MD5
ec57776a27143aab43a70e503eede12c
SHA1
850defbc49c3d88cf79f14573995d43f8070be46
SHA256
9e343a4920e4d47af9d70e1f2fd6564af27dc9a97d5dea6098729d26566308e3
SHA512
f69506dbfbc93d90338636e0b8cbde61ab6e424da440e651f105c0d213ae189febd40c55bbfc8617c7c4e49405936eff8a9a5851a0187026e6f09e3d7343a760
SSDEEP
12288:ByA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvi/zYkM5GVBwV:h1fqZCHwIr00taCiHR6/8G
Checks for missing Authenticode signature.
resource |
---|
ec57776a27143aab43a70e503eede12c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ