DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
edafa23e05c351519abdd4c97d94655c_JaffaCakes118.dll
Resource
win7-20240221-en
Target
edafa23e05c351519abdd4c97d94655c_JaffaCakes118
Size
634KB
MD5
edafa23e05c351519abdd4c97d94655c
SHA1
a64f5524de7a26f54cc3914610c952a8cbcd8050
SHA256
cbe3f50704a4791bd4bc7e8b6fef6f317c6f03885a7e658947fc726d48dbe847
SHA512
da63a7cc06b66f4360c0f7f20da34fe94f711db430753051a666708830698278094cd7c773f749e2bfac23ae659c91a38ed6fad1263c00e58de9dfa2b0f88527
SSDEEP
12288:uM0t9FNcxDMmfrLAF8rZIRf2MmsXa7EpXmhm/fO79s:GtjNcXnVInva4p2hO
Checks for missing Authenticode signature.
resource |
---|
edafa23e05c351519abdd4c97d94655c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ