DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
05b256c7cfc1de04fefebeb98e4a7fe2_JaffaCakes118.dll
Resource
win7-20240508-en
Target
05b256c7cfc1de04fefebeb98e4a7fe2_JaffaCakes118
Size
472KB
MD5
05b256c7cfc1de04fefebeb98e4a7fe2
SHA1
035e1b617a3a1e82aa8de0c4dd34f2a09fd355a5
SHA256
c481b984a83dae789d147f5d34fc062af49e92ac2a61bea593a2e53294d3244e
SHA512
c4635cc4c59f756086f9526ea5f4da019ae39fa47838fc3a9e00870a622cb2b7a1275a60c81c36a9a2258082e3721f6b56075dc879b645faa0595fc2d38c68f8
SSDEEP
12288:GPdsrPDzdSkR92jT4Pk16a6l22LVVEkejgn:edwPbf2bI24VleI
Checks for missing Authenticode signature.
resource |
---|
05b256c7cfc1de04fefebeb98e4a7fe2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ