DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
Static task
static1
Behavioral task
behavioral1
Sample
f55278fab3903c4438f1c2e3b25bc93c_JaffaCakes118.dll
Resource
win7-20231129-en
Target
f55278fab3903c4438f1c2e3b25bc93c_JaffaCakes118
Size
550KB
MD5
f55278fab3903c4438f1c2e3b25bc93c
SHA1
f1f5be9591445bc656c364cdc02b9f660fe18cc9
SHA256
47fceedb2522cb73307376afa6bf0cc3899135e86aaa62a55225c9b5c7ec65ac
SHA512
9bd3a2699d092d7b9e8e1ae86c6229712bad475cb75fe921ff65c164c226c04e532b63a4c78905590754c8e5e3f0d1239a88874b433d6a7b4841fa57d4b3ead0
SSDEEP
6144:FXg4N/1idqbBNELG+a9fOk8+p/nURYvRmne/H3ADTLqX4k64dS7Hto2UXOpqerhr:1fDi4BNELGFb8Ql4HmXyNo25qerhTyq
Checks for missing Authenticode signature.
resource |
---|
f55278fab3903c4438f1c2e3b25bc93c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ