DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
19f782f9bcce1aea345f83a680628cf5_JaffaCakes118.dll
Resource
win7-20240508-en
Target
19f782f9bcce1aea345f83a680628cf5_JaffaCakes118
Size
610KB
MD5
19f782f9bcce1aea345f83a680628cf5
SHA1
daf855806cd73ac88db1c096bcd61a008d11f8ce
SHA256
8a3dbc46510ff0e9cd8f1b37ce72bf779bfd83167f148351c2258cb15d3befc4
SHA512
c491e5df0363cb5b36d127f460870c511fa6659e989294b43a629fea7d620d76c011c657235b48533311184d12ee18a97f51098a23c2252aa15d6fa008b6aa8c
SSDEEP
12288:RyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrviQA0hi6ipVBwaHeIBv7pj:R1fqZCHwIr00taCiHR6OhIpVeIBT
Checks for missing Authenticode signature.
resource |
---|
19f782f9bcce1aea345f83a680628cf5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ