DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0c9a9c02760cbf969e7cfe7f94f047a8_JaffaCakes118.dll
Resource
win7-20240221-en
Target
0c9a9c02760cbf969e7cfe7f94f047a8_JaffaCakes118
Size
1.2MB
MD5
0c9a9c02760cbf969e7cfe7f94f047a8
SHA1
25678dc38a08dab63a404fd2577a07635ca2f5a5
SHA256
053db5da1009f632d0625917ad533a5833fd8155998a1a1ddfc406e5dec0eb73
SHA512
525dab6cdc08ff0c4b6426a5bf011079fcecccfe0d73813ff7f72925518e46499200c5f23c211e3a4255bc76c780cb5a1bd251778e45a69aaacdce71e2f36de1
SSDEEP
24576:vHD1jqVMs0/2vJr2T+95SeNqG5abHOcWQR5Cy0Tii/fQEhsfZK1Wj:v4VwIf9AO1geTibuWj
Checks for missing Authenticode signature.
resource |
---|
0c9a9c02760cbf969e7cfe7f94f047a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ