DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f837700f87f84b8f62d0c0a1f880df0f_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f837700f87f84b8f62d0c0a1f880df0f_JaffaCakes118
Size
121KB
MD5
f837700f87f84b8f62d0c0a1f880df0f
SHA1
043fde709cd4a83ab80768baf73a7f049aa5104f
SHA256
191104fcfa161047cca41ce2686ca78365e981f1105656ea1b297368a206c20e
SHA512
60a9da52474fb80136f55bcf3bd470a3f9878bac561d7f24cd067ee7e9595c622866554e5c4c6268b040fe7ba96a1d5f66432d2ca863e50d09ef1640226c753b
SSDEEP
3072:thnMck+X/9cJ1nrilKQdDEfTjWBAWkO2jDB4gb8WU:nnThVo1nxwQ7jWR/2XB4C
Checks for missing Authenticode signature.
resource |
---|
f837700f87f84b8f62d0c0a1f880df0f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ