DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
177c18eac26f781f366d73f3e99aa63a_JaffaCakes118.dll
Resource
win7-20240419-en
Target
177c18eac26f781f366d73f3e99aa63a_JaffaCakes118
Size
655KB
MD5
177c18eac26f781f366d73f3e99aa63a
SHA1
157c316798b2a53b934ecfd00bdf6209e9fd0c6d
SHA256
c730e688166706b7f22cfe412779abae2135fcec7e99287708f1fb39b55d2631
SHA512
688f4cea10e464e444d64913e1fbcfa20dd781f4d515829d1ffa34db2c379fe968db0f8f803245a7b4ad1d5572cffea02ca43c59e5f9eb19b54b08582fad13b0
SSDEEP
12288:qdmHldG9b6P8j9UhgGSdv33OGpdC+cWZ3Nu3koHH9sDLDHHeIBv7pj:qQFdQeGuuGSuGW257qHQDneIBT
Checks for missing Authenticode signature.
resource |
---|
177c18eac26f781f366d73f3e99aa63a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ