DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9e6aaefb6a3a238abebd34f07b59c742_JaffaCakes118.dll
Resource
win7-20240220-en
Target
9e6aaefb6a3a238abebd34f07b59c742_JaffaCakes118
Size
172KB
MD5
9e6aaefb6a3a238abebd34f07b59c742
SHA1
45a836652ce6701169d809de00ccd4c4948edd4b
SHA256
c385c0f92337fc44bfc8900f06298aabc414d46d36db20b38f861b7c72e443f4
SHA512
271b4000072bde19508654f71f2cafaa4e706340b8fe1dc0066bff2d0978caf061ae2092f3c6485e6ffb03efb1029ae5cfabd1655a07d691c9a6516957c135ae
SSDEEP
3072:VWYTN++G3KDEd2zv++fUOOpWp5L4pqZf/74i1VmMxdNOB:UYTN++G3Ezv++MI98qZrrmP
Checks for missing Authenticode signature.
resource |
---|
9e6aaefb6a3a238abebd34f07b59c742_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ