DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f9c8399fcd4a1961e489c8252bc9024e_JaffaCakes118.dll
Resource
win7-20240221-en
Target
f9c8399fcd4a1961e489c8252bc9024e_JaffaCakes118
Size
565KB
MD5
f9c8399fcd4a1961e489c8252bc9024e
SHA1
6ef2c0b743f48f9215df50e121b2d8f6e5fb34cf
SHA256
f933eb3b4eea794e332761089357ce6fa99495b9cac235f4cb479bde6dd03614
SHA512
83379031c66efc7782967100ea9b0eb926f0a592ad017348aa777d5f48e760de91137fd83d655c4746731acb82fa34c1636950dc259c8d31f3b838b7b9daa22d
SSDEEP
12288:9yA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGhZZVDLfVBwv:N1fqZCHwIr00taCiHptZZVnf
Checks for missing Authenticode signature.
resource |
---|
f9c8399fcd4a1961e489c8252bc9024e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ