DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
09a5c1b39bac8552d3f06f88363358fd_JaffaCakes118.dll
Resource
win7-20240508-en
Target
09a5c1b39bac8552d3f06f88363358fd_JaffaCakes118
Size
565KB
MD5
09a5c1b39bac8552d3f06f88363358fd
SHA1
aa531f4e7ff32e5f3d7fb0399dd64175f55637c0
SHA256
965e60eaa6b253c4313f02a165fae32ad4600628ae1ae47035d8052cb99fbab4
SHA512
c5deb79ef1c30140e3c351f940812b932e2904f5b7ac7870ff2fe7f45982af29e618fc01440b731c4bfdc86b4a4d202248623a099610dc5d5149a5f23589e4b6
SSDEEP
12288:97Qu2fTS8P0ZL2Eg8wUVQyFk0Z8XjT5QG9W2rZXcdPiw:9kueTfK2302oks8fjU29c0
Checks for missing Authenticode signature.
resource |
---|
09a5c1b39bac8552d3f06f88363358fd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ