DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1c858d7a2a6c8f2cea5825dd0d0dd476_JaffaCakes118.dll
Resource
win7-20240508-en
Target
1c858d7a2a6c8f2cea5825dd0d0dd476_JaffaCakes118
Size
651KB
MD5
1c858d7a2a6c8f2cea5825dd0d0dd476
SHA1
a1af7eac8901dba2a7404459f5a35fb8da42ed2a
SHA256
c9addf541df4e4a8e9b6bfae46b395de450a5e751743153e5f81e5ddd7f60ab7
SHA512
0e13a8a7de1ca44a804d50406be10afd17713704d604a24c484f374e1dd193658ea9edb73b35cfd0a1cc952da7e2ddfcefc2bbacd4345bc5ebcc30e52c370fad
SSDEEP
12288:0tv0EYFWSCJZu51oBcvZHR1LL+Z6biLUWJy1BWcQfHCqmoRI0mD5l6oyE:gMEvSwsZBR5+UiLTiE+oRI0A6B
Checks for missing Authenticode signature.
resource |
---|
1c858d7a2a6c8f2cea5825dd0d0dd476_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ