DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
19e94c32a60196c5bda6ae19a9e334e6_JaffaCakes118.dll
Resource
win7-20240508-en
Target
19e94c32a60196c5bda6ae19a9e334e6_JaffaCakes118
Size
641KB
MD5
19e94c32a60196c5bda6ae19a9e334e6
SHA1
a5e642960c4a3390af361e04e6713d46933c1e1d
SHA256
1d186ab63338d2ec591fac26378447a9f456fc5f644d52e7bdfef90434390add
SHA512
b0f9a304959a555193821d3f5a719a8cdbff025c2b990a48799b3ef5edad1615ac561497342067d905886cc7b7c6fc84ae58ecb722b259c6d44699bf80655616
SSDEEP
12288:Q0Et9YDc5DMWfT44XUDxoyiD02sHtaXdt9hcWq2tePm:4tWDc/EXouPts/h4A+
Checks for missing Authenticode signature.
resource |
---|
19e94c32a60196c5bda6ae19a9e334e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ