DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f656e520df03ea15acf28924a78b73b9_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f656e520df03ea15acf28924a78b73b9_JaffaCakes118
Size
121KB
MD5
f656e520df03ea15acf28924a78b73b9
SHA1
67374470858ad472e04acc05d327e651f4907242
SHA256
19f74e0238a937d0591445c34de7558d41e32953c5e7650a5042e6aeb47f1f6f
SHA512
44228ee140c7db7f8bf6dc1f581bdd460710b3dd3a0e73502ece4c85d4ae5bebcbf8de9442cb70fe0b4cf717c25a8f609458b366785e994af60226d009854669
SSDEEP
3072:WhnMck+X/9cJ1nrilKQdDEfT4mZtHJ6O2jXB4gba2U:gnThVo1nxwQ7TZNv2DB4C
Checks for missing Authenticode signature.
resource |
---|
f656e520df03ea15acf28924a78b73b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ