DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6e9fea4f4a11f0ed27d1f7c161be210_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f6e9fea4f4a11f0ed27d1f7c161be210_JaffaCakes118
Size
185KB
MD5
f6e9fea4f4a11f0ed27d1f7c161be210
SHA1
f391865e2e5a484be302123457ece6149caffadb
SHA256
108e41ca19af4bc226683e99626cdc63f732fd708c677c9c576ee5d172fff194
SHA512
7625003dc38fedf7d61e0d28acee4471aa3d779c0e6aed91de0c394e20dd11a8cc405f9962183481701705d6f439a452f3354a817151ed4b9e1ac4838325e1a6
SSDEEP
3072:grd8Ctgxa+p1mzzJxkxOPMCOngCSigu7qP0EB1lQreB7gtD2Au9Lya0ZW:gGZQ+paMOP7ipGxlQreBktYcq
Checks for missing Authenticode signature.
resource |
---|
f6e9fea4f4a11f0ed27d1f7c161be210_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ