DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
70400e38bb78d471781706c8bb5447b6_JaffaCakes118.dll
Resource
win7-20240508-en
Target
70400e38bb78d471781706c8bb5447b6_JaffaCakes118
Size
280KB
MD5
70400e38bb78d471781706c8bb5447b6
SHA1
7bf16542703be6822b35bb3f55e3d41d413bcf56
SHA256
d774f0928fa9a327a9a1ad78cb4b32466b3b30403e9a240b58ad735da632cdb2
SHA512
2fbddd460247b0c70509b9fb1ddf52148afe86da6aa98135c1863d9892f9271716168584eb7b421ec63858fbe72fc8c9112cae480f2e3087b039534f51f16fd1
SSDEEP
1536:hdCjQSzyAlUOVthVS4NIcwf4OlwtX+w5Nt194hzNRNqdORPOZoyPkyiC2Jrqyyul:2yAlUP/4Og1d4POD2JrqyncFJ87TT
Checks for missing Authenticode signature.
resource |
---|
70400e38bb78d471781706c8bb5447b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ