DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
087d86bbbc9a3a3d83a398613e0c7c1c_JaffaCakes118.dll
Resource
win7-20240508-en
Target
087d86bbbc9a3a3d83a398613e0c7c1c_JaffaCakes118
Size
567KB
MD5
087d86bbbc9a3a3d83a398613e0c7c1c
SHA1
8a139c70b84d4c409fc1c0c66c2fdb2dce4fcd30
SHA256
a9932450083d30aa4e3df354928f7fe4b7f9858757e432765fbef578dc9f0bcb
SHA512
03b4d2d8af68f3bf43a4045457e49c6a2e4ec076a70ce19c06db542bd5c7404103387a1d659abb2a0001472684b6648c203b05c30e3a5a6cb21e28981815b90c
SSDEEP
12288:d8rJycvmHMl+lCFWPylJ3B5eXvIGvpeMYtrEi:QEhHMlvLljgfPQMY9E
Checks for missing Authenticode signature.
resource |
---|
087d86bbbc9a3a3d83a398613e0c7c1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ