DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fd970e96f34a9fa9a30ebc4fb1796863_JaffaCakes118.dll
Resource
win7-20240220-en
Target
fd970e96f34a9fa9a30ebc4fb1796863_JaffaCakes118
Size
145KB
MD5
fd970e96f34a9fa9a30ebc4fb1796863
SHA1
543eeac4e0c5ab3496225f8562bc6abe532b2930
SHA256
08e5c656e4e4b09de77c0a5c9e122c1e5ed98305f44f410fcdc13637124b769e
SHA512
59743d3a86a11578928bb86b28d186dbe65e80919a233e85dfab135ad65868d072f61bdeec70983f8701a9626fb2874395b0f33e321f2e96b3f68d5f636352c8
SSDEEP
3072:vX1AC9/Cf8YXeiGmgIdHa6apOZfeawOj9EIAb/NJnBy:tdtA13d6+Zfe1y9qb/
Checks for missing Authenticode signature.
resource |
---|
fd970e96f34a9fa9a30ebc4fb1796863_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ