DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
17b27a78cf82e579031718ec9abaa178_JaffaCakes118.dll
Resource
win7-20240221-en
Target
17b27a78cf82e579031718ec9abaa178_JaffaCakes118
Size
562KB
MD5
17b27a78cf82e579031718ec9abaa178
SHA1
27b07c68ebd1a8d4e94872b63ebaa229ee2635d5
SHA256
c349d13907ecd813d16544834b8418bbefba218c2a9d6188c5dec8e0a324d760
SHA512
dc6c7b0f100675ad2f13a980ccd6d2e9abda9fb53c4cf1f4acedeaddb8889eb520d473dc6b2bbbebea1811653340192be594b7a33b658257edbe593957992b7c
SSDEEP
12288:Q0Et9YDc/Tk4Po4wSSqodPF9C2vTgYnNUT3RORa:4tWDcw4o4Ts/9CknaT3cR
Checks for missing Authenticode signature.
resource |
---|
17b27a78cf82e579031718ec9abaa178_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ