DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f4b5ce2e81cbcc1458b0bc896f457a18_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f4b5ce2e81cbcc1458b0bc896f457a18_JaffaCakes118
Size
607KB
MD5
f4b5ce2e81cbcc1458b0bc896f457a18
SHA1
3abe1c85c7a5600552098210c6cdd4b10891d457
SHA256
243a561308bcdb01b41c3861c0b724e4621e6dad1194e065d00eb5ea57ba2d1e
SHA512
a98a470a2b5d9d5d3c95d99119f45ce457f82828461b2a2a9e443ef100d198e2068433d35f9998ef4a64d7cc0c39380ef57f2410acf493100fa8455ff82dfbca
SSDEEP
12288:1pIt9HX65cspWkY5DARyLuaIg3QaogrRmfCj0V/:1etFXsoB7LGnaogrcfCj0V
Checks for missing Authenticode signature.
resource |
---|
f4b5ce2e81cbcc1458b0bc896f457a18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ