DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fb2bc48be86f2f72d6fbe367954436cd_JaffaCakes118.dll
Resource
win7-20231129-en
Target
fb2bc48be86f2f72d6fbe367954436cd_JaffaCakes118
Size
529KB
MD5
fb2bc48be86f2f72d6fbe367954436cd
SHA1
d9b84cbd47def5224fe1a3d1b587799862fe9e5c
SHA256
9639b73c8b020534786810960dae44af3a748fe6ae060971aaa6366bca5e8532
SHA512
8ab9fbf77d1a9c659a45983a2f5135e6d8979ed5d384c9d6b1a27fd87493ac085bd01491c162bb36140782d89d5d143912794c2e9208828fbb7d625acdc377ee
SSDEEP
6144:+/fJ1NE6TRVttT4kFr/aKpaCAezwMwfJvVQ7G/bbbGhydtGQOnEYBNozxwCIl:UNEKHttTvZAecdfJ7bEyjYfo9e
Checks for missing Authenticode signature.
resource |
---|
fb2bc48be86f2f72d6fbe367954436cd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ