DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fef0a0e6f2bda4f9ac5f7346970c5690_JaffaCakes118.dll
Resource
win7-20231129-en
Target
fef0a0e6f2bda4f9ac5f7346970c5690_JaffaCakes118
Size
610KB
MD5
fef0a0e6f2bda4f9ac5f7346970c5690
SHA1
c0241c8a841c761269e0352d3755bd7280436d6c
SHA256
8b320830fb3c34b7513074186e610f815eb9b67e79c3ef14add233f0350c80a1
SHA512
6ec14dbad895e27b2667ca3eef6d3e562cd20642d7cd7468c033c9ec3ac378732d882a3e09a7d5db94df10445ad1f1ea9dab4fedbae8e5e30b4e1d31fb630b44
SSDEEP
12288:hyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGeQoLHE3VBwkHeIBv7pj:B1fqZCHwIr00taCiHpjkk3XeIBT
Checks for missing Authenticode signature.
resource |
---|
fef0a0e6f2bda4f9ac5f7346970c5690_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ