DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
Static task
static1
Behavioral task
behavioral1
Sample
fcb53acd5fd1637a2ac1bc69f396e92c_JaffaCakes118.dll
Resource
win7-20240221-en
Target
fcb53acd5fd1637a2ac1bc69f396e92c_JaffaCakes118
Size
256KB
MD5
fcb53acd5fd1637a2ac1bc69f396e92c
SHA1
a09432a56375c5a39856d59e402c3f8642edda7b
SHA256
cc7045d9fe77c4aa4cb646d01fb4700008a34f58f49358d0b0b0997d21016aab
SHA512
47bcd8326a65b2a50ee7a9691853c6a6d6a424ad4e0a7760794aa20c137450017793ed9756302666b6b1aed93048d879395a6fde2c95f9b9fc67ca4bd6e38116
SSDEEP
3072:eb/VDsMK5SdPlKCXbkB9Kv1y5Gun6XKwRDcXEX55d2wNQ+XnwEf4bvuQ5OjrDGZt:WCoMRt6XKUSRACdOj57jY5jM9H8eGN
Checks for missing Authenticode signature.
resource |
---|
fcb53acd5fd1637a2ac1bc69f396e92c_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ