DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1b17ba300e972c1b0bc02c672691fee8_JaffaCakes118.dll
Resource
win7-20240508-en
Target
1b17ba300e972c1b0bc02c672691fee8_JaffaCakes118
Size
440KB
MD5
1b17ba300e972c1b0bc02c672691fee8
SHA1
bf2d7026fb4cb16ebacbd8823bc9aab5afa92662
SHA256
6c2da5c546185507f3de674085bb0261074da1f3a12ac9739a67b4279644479a
SHA512
403947adf0d8433ca9cb73d3155131e5eb9e6be56edfc747a1ee8de28ea607fe1677924c187178680cb07434207def027bb1e02030de457317579f3e395cf369
SSDEEP
12288:+wuMXc0336HdDI5+nCA9Vadqatkg89dNa:7RcUQk5+CaakzgKX
Checks for missing Authenticode signature.
resource |
---|
1b17ba300e972c1b0bc02c672691fee8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ