DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f14a5bfdadc915efd8748d77fcaad8e6_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f14a5bfdadc915efd8748d77fcaad8e6_JaffaCakes118
Size
252KB
MD5
f14a5bfdadc915efd8748d77fcaad8e6
SHA1
1c7dc5ccb3212e2ce5f28f03c3285227e30de00f
SHA256
7351886cdf3a677ad115591ec23b61d836596bcc5fb7b3f49a816867e6d8fc51
SHA512
67f862a0f7b7cfc44cc28e957f0d1cd5fe47ca7e10145bdd134db8979f8dc8cffacebf0b50cf74b435b0dcaf373f6265624c4b03771187e7821b0fb0c8556821
SSDEEP
3072:g3BagZ5C+YYVVlhHAYZ26Ac9O7WZg1fH9+lxtVfOa0VHUULiQUAKGNp1R8me9LbT:5cVVlLBdZgF9+L0m5i8r
Checks for missing Authenticode signature.
resource |
---|
f14a5bfdadc915efd8748d77fcaad8e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ