DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
17012c6b679b0d0077717701f5b756e6_JaffaCakes118.dll
Resource
win7-20240419-en
Target
17012c6b679b0d0077717701f5b756e6_JaffaCakes118
Size
447KB
MD5
17012c6b679b0d0077717701f5b756e6
SHA1
daf6f9abcc06d994f31fb7497f12594f41b87272
SHA256
f39cf5747bcb7ef1c22312a56ace2adcbe1579f620aaae7bda4c6ecee8ffefc9
SHA512
f3b81cc991f752d2d99d8360a78f91395e07d17540da95752fac878a9ad8f17367e0dc263d1439eb82b6acfe7925bce1b576660cc99b6791b10494b344121307
SSDEEP
6144:L0/X8NOXt3ctph6Lnu4KWTN/BJ9Yv5GpIP9UzTbBG6oG5WWH4lAiVZP15ZKkP3ls:U8NwtMXh6r5P0UzT98Hrz15sK+
Checks for missing Authenticode signature.
resource |
---|
17012c6b679b0d0077717701f5b756e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ