DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2897e5cbc9db54365285ad89c0cb82b9_JaffaCakes118.dll
Resource
win7-20240220-en
Target
2897e5cbc9db54365285ad89c0cb82b9_JaffaCakes118
Size
635KB
MD5
2897e5cbc9db54365285ad89c0cb82b9
SHA1
ed308ead38a37c72c46b0fe608f7e9bcd1fc022f
SHA256
55b9ad8cb78143e3ac8e72f471420782199ebca4791431fa604db9cc997e5735
SHA512
807774d012570109b7040401d156edf6c6a07e87133900067d67eb169c1510329a412fb5aa077e5c02db15a2accf3086c88c32fc6e5de17512cf4e8c3fed7a2d
SSDEEP
12288:gM0t9FNcxDMmfrLAF8rZIRf2MmsXa0ex0Mhah/fO79s:AtjNcXnVInva0ex9hap
Checks for missing Authenticode signature.
resource |
---|
2897e5cbc9db54365285ad89c0cb82b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ