DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0576be156e7d7540dcfa86050338e371_JaffaCakes118.dll
Resource
win7-20240215-en
Target
0576be156e7d7540dcfa86050338e371_JaffaCakes118
Size
2.3MB
MD5
0576be156e7d7540dcfa86050338e371
SHA1
78c86d2f9aa3140361f48b16f5996330f379e0ea
SHA256
9cd6c46e9f3ff3bedd8585e5b25ba91e911734687a464b532af75069ce8ee99c
SHA512
8afb1478daa86b7e37775fdcf076f6bb0225169a5cf1a98644284bf04766c56775997fa9be081c64ad498eaa6c32ff3ba54921ce5d9128cfd1aa3fd6d03a8164
SSDEEP
49152:CNGNEWvW3QQEEehgrCEdKiuxa2kkikGI62Uh2IZ6O5B66fSNybonUEWTlS:/NECW3QQEEYgrdKiuxa2kkipIrUp7B6D
Checks for missing Authenticode signature.
resource |
---|
0576be156e7d7540dcfa86050338e371_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ