DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2410388fbcdbc23dab793023a78fc1d7_JaffaCakes118.dll
Resource
win7-20231129-en
Target
2410388fbcdbc23dab793023a78fc1d7_JaffaCakes118
Size
850KB
MD5
2410388fbcdbc23dab793023a78fc1d7
SHA1
15a5d1858156d43fa277b24fc422242c2c0a9bf3
SHA256
169db586e18f8b3710287f87a0f87b9c7dfe1b8748eb769aadfb9d1a469546be
SHA512
27bae86bfa96a898517d09b0555838b1cc0b09420e48361ccdd346ba210bf15c5d651008067ddb9949a18107c902b87ffe0727586507b75b528220184d428f01
SSDEEP
12288:vtv0EYFWSCJZu51oBcvZHR1LL+Z6biLUWJy1BWcQoHCqmoRIhY2nqX5l6oy0jLr9:1MEvSwsZBR5+UiLTiEroRIhY2nA6yl
Checks for missing Authenticode signature.
resource |
---|
2410388fbcdbc23dab793023a78fc1d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ