DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1c1a2b6598cf6d44c73141cfbde8f953_JaffaCakes118.dll
Resource
win7-20231129-en
Target
1c1a2b6598cf6d44c73141cfbde8f953_JaffaCakes118
Size
438KB
MD5
1c1a2b6598cf6d44c73141cfbde8f953
SHA1
4c674a7001aa863377bb5f44380d7c4f954a670f
SHA256
c14a2c037133adc1ff34b714edc83d387ff16298f34b0394133f5a195452dd96
SHA512
4b5bf708c907eadadf45c3820c9b942131a24f23c6e99aef3d885ef766bbadf5941989fded1447da1b0c24ba08a121a1204aad90f21af636fad3f7f29dd73457
SSDEEP
6144:eZ+3xd40imiligpQMTRPmK/9PmYvieYdnSjLJGIIZVdhycFhKfdg1ZL8NK4WEo+m:1xd40XilL5VBLJd43FbL8Y/+ob
Checks for missing Authenticode signature.
resource |
---|
1c1a2b6598cf6d44c73141cfbde8f953_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ