DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f7f77c69211aec473df05caadc400e4d_JaffaCakes118.dll
Resource
win7-20231129-en
Target
f7f77c69211aec473df05caadc400e4d_JaffaCakes118
Size
640KB
MD5
f7f77c69211aec473df05caadc400e4d
SHA1
b852ca61b6bd0e53c2556f5c604bb0f7af93ef89
SHA256
ac23a76462f59d8e103c726e755c4351ff2fa31dd2c5680bc57c655d2a3abe28
SHA512
497c5db72402114b84b4da2e0b5a7ae8615a6d2868d8a23a2509d089b96d5f7b545d310dc79796b46d3bec8e6f1a8be8afb7548b334dc568961f3f88b0b1c040
SSDEEP
12288:XkdtYzsZDM2fjYiV/UzxoyS7nUmsn7lpcEYh+/2tePm:UdGzs/0kwolUf7lpcZh+/A+
Checks for missing Authenticode signature.
resource |
---|
f7f77c69211aec473df05caadc400e4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ