DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitEntry0
Static task
static1
Behavioral task
behavioral1
Sample
0cb7acc2b0ba2669840ef5139adf7ce2_JaffaCakes118.dll
Resource
win7-20240221-en
Target
0cb7acc2b0ba2669840ef5139adf7ce2_JaffaCakes118
Size
208KB
MD5
0cb7acc2b0ba2669840ef5139adf7ce2
SHA1
28e5046fced6e110c408d50e5a87bb93718f0a17
SHA256
ef636152272f611a29a78685dc0fe6926ee670d3544d0cffda8ea84e783832d4
SHA512
1f6bbf8bb7095094180886c06a160b7b0be13366d1a38f394b66116b2d2b6c9ce9e70d1ebd6f3cb99ab004e7fe0e79ae389a2ba7256aa44114d2248899b4ff4e
SSDEEP
3072:Pq2PJVJOs1qpmu2/oUJGc+DkNXlKbGhAuEv/EmPL2PIKXECteBbINW/p5w/dLHD:i2P5F1Ak/x55E8miOsIXw
Checks for missing Authenticode signature.
resource |
---|
0cb7acc2b0ba2669840ef5139adf7ce2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitEntry0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ