DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f2e225b94d166e5ddeb1e2548d49768d_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f2e225b94d166e5ddeb1e2548d49768d_JaffaCakes118
Size
566KB
MD5
f2e225b94d166e5ddeb1e2548d49768d
SHA1
db644ed3820970a2dd7567cff238eb3d99089fe8
SHA256
28470fa93fc5797eb993da88e581094b7d35905663a893940554a0548df467a3
SHA512
f63836e9c41096faee1f25542c68702f72793b2ec035aaf0d774abcefe98e5de4b3fe158032804acf4f437328bf756e41a104ef2ff10a5be66b2c6aa3879e5a8
SSDEEP
12288:NyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvihzNMipVBwj:91fqZCHwIr00taCiHR6hBPp
Checks for missing Authenticode signature.
resource |
---|
f2e225b94d166e5ddeb1e2548d49768d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ