DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0fc5e6a3de5ea4b861eb85489130f425_JaffaCakes118.dll
Resource
win7-20240611-en
Target
0fc5e6a3de5ea4b861eb85489130f425_JaffaCakes118
Size
797KB
MD5
0fc5e6a3de5ea4b861eb85489130f425
SHA1
abd9b8cf7e08d0efbb10cb1415575160bfac948c
SHA256
b5b37212aa06a5a7f801e9520546d35dd0be5cb25d0b21438d5d9cf2d1fd9cf1
SHA512
c8652f1df56925b998d91de1c90cb237bf0441ddc956de883e136a7665bf7694cff4d1870a3ea1bd370ad28ee0f21427e34e6dfa1305fa9fe537208c9bf76694
SSDEEP
12288:ftv1W0IFGiS5JeprW70QxcPJHRFLL+p6r0k2JC1RW8QrHCqmoRIIfden6ou1cU:FM0PiQ85xRJ+U0Dy0qoRIIfC6OU
Checks for missing Authenticode signature.
resource |
---|
0fc5e6a3de5ea4b861eb85489130f425_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ