DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
23a4b3146235d3175deb918b9eb76ae3_JaffaCakes118.dll
Resource
win7-20240221-en
Target
23a4b3146235d3175deb918b9eb76ae3_JaffaCakes118
Size
635KB
MD5
23a4b3146235d3175deb918b9eb76ae3
SHA1
65eb5fafe0e1583e44dedaf9e2732dd0c939bb1f
SHA256
5a67f3c66526ca150f49b771fdde1999956d7521eed13015cda475410b28177e
SHA512
1cc838d3675860e4cf4e8e598e0b075d8a63de024eea85c1acf0803472ff32d08b452b6a96d3dfca109e5ef05508b7a700e5380ec163842210e702340df9f964
SSDEEP
12288:aM0t9FNcxDMmfrLAF8rZIRf2MmsX4en5LXxh1/fO79s:CtjNcXnVInv4e5LBhV
Checks for missing Authenticode signature.
resource |
---|
23a4b3146235d3175deb918b9eb76ae3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ