DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
21741171ea1fd236e6284fda6411bd0d_JaffaCakes118.dll
Resource
win7-20240221-en
Target
21741171ea1fd236e6284fda6411bd0d_JaffaCakes118
Size
587KB
MD5
21741171ea1fd236e6284fda6411bd0d
SHA1
3f43f9f3239d0e4e3f46d3012c4fcf86e014450d
SHA256
861dd2b02f01f678f27a82609d4d63762b042f4d2d951095fcafce586990d70e
SHA512
55c48047e7b6378107f1b4e2310335df4f82c9eb8d07d6ff0863bb1e187635c43df6b815f19c41bb0d77fda4812de71895e91b788e5a5eb3b4d58f0f0a4e5bed
SSDEEP
12288:KQhw5M1yIWx4Df5T859YW+5XA8BwjoNatlZsxe32BR+HI:KgCM2x8BT859YfegilZ4C2z
Checks for missing Authenticode signature.
resource |
---|
21741171ea1fd236e6284fda6411bd0d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ