DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
276006f84603fd66da71a50426d5fbc8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
276006f84603fd66da71a50426d5fbc8_JaffaCakes118
Size
644KB
MD5
276006f84603fd66da71a50426d5fbc8
SHA1
bb95fa8831509bf5d78ed52b48771c480e43bc71
SHA256
d95031e00d23c209ee792db267916d8149a712f12f87068aaf62efb310adb685
SHA512
5bb39cf4c14d4cb25cef6d489ba4b0ae91e94f4a74aca019b400a6d7a04c506b06971b2e96f971e83e42daf54351c2a0e64714296e5005b075057562509d9296
SSDEEP
12288:+viGqB8vFJySCXSs9/NAolnnMATPxhOLg6s3eToy+vLiQckmHeIBv7pj:+6Gw8Ty3XXplnjlhOLg6s3Soy+zipheU
Checks for missing Authenticode signature.
resource |
---|
276006f84603fd66da71a50426d5fbc8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ