DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
004bcbe145a285f166e5f85af5b15c99_JaffaCakes118.dll
Resource
win7-20240221-en
Target
004bcbe145a285f166e5f85af5b15c99_JaffaCakes118
Size
451KB
MD5
004bcbe145a285f166e5f85af5b15c99
SHA1
19260820819f46ad43d3dd53fabfbfbb07cce4bf
SHA256
9bdbc7e9b013a58b012c3c7c91e5f55db663e49a37fe187222581564fdc77a9f
SHA512
ab82d4e428d0e506f3a093aed3bc18ce5004d845ceb46175cc30a547bb243bbcdb5b75af698f57db349db2858f33d20c66d7573ae42e97bb2669d66a6525ff39
SSDEEP
12288:51NGNUAPs6jS2jbty/q1PvGWjF6uw+Ic:x8rS2jRdE2e+I
Checks for missing Authenticode signature.
resource |
---|
004bcbe145a285f166e5f85af5b15c99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ