DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f36b75691376eb8c8d1ad30621eb374d_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f36b75691376eb8c8d1ad30621eb374d_JaffaCakes118
Size
635KB
MD5
f36b75691376eb8c8d1ad30621eb374d
SHA1
58b9807ea9ab5197606e7e8f6ae8f8bd99fd14ff
SHA256
b511a34493fa6beb5af5665e3ea1b28dd773f8e5f91ba2d4636f26db7df9a132
SHA512
489d031b6bcf9ccb03852f3842787a329ffb3cf1a459bc21d4d7d78c3730b49ac8c20e19cbe05282481ebb63d972d2ec3d08d38ddd3b7d6df6536d29673df618
SSDEEP
12288:wM0t9FNcxDMmfrLAF8rZIRf2MmsX4eQe3Qh3/fO79s:wtjNcXnVInv4ejghn
Checks for missing Authenticode signature.
resource |
---|
f36b75691376eb8c8d1ad30621eb374d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ