DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
18467a6317461af6a8aff887bd2c8616_JaffaCakes118.dll
Resource
win7-20240221-en
Target
18467a6317461af6a8aff887bd2c8616_JaffaCakes118
Size
641KB
MD5
18467a6317461af6a8aff887bd2c8616
SHA1
650d59b4cf09037752ccb1fbf41f84964b7c1b18
SHA256
0c10837eb1975fa76e12378da3d374f8a01c20eb11b5bef451de6abf1a3f89e3
SHA512
16cfd0a5afe0aff8838c911a69f9ed8d29368b4255c28027a6fc12d732b6213d12d6fbffe54c089522b1dfc7837206b2bc6899dbda821d00399ebe464b389d18
SSDEEP
12288:Q0Et9YDc5DMWfT44XUDxoyiD02sHta5ZWshhcR2tePm:4tWDc/EXouPt+WQhUA+
Checks for missing Authenticode signature.
resource |
---|
18467a6317461af6a8aff887bd2c8616_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ