DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2a454098c78df5f244b2a215c903dee2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2a454098c78df5f244b2a215c903dee2_JaffaCakes118
Size
607KB
MD5
2a454098c78df5f244b2a215c903dee2
SHA1
ae3c908986a0c2c873ee816654d21ca3b4f4cb76
SHA256
daeaf48a803d10041908377fb27ad25ac5d3d4ab8b18a16bea5cef2b29aa5ff3
SHA512
68353135f8014f804d1c330f14a7aaa5d4ce8cccf04ec48ea947a9c323381b1b478217ea809161f4b98e7d212d303f06518803311acdb54a6faeffbaf58606c5
SSDEEP
12288:KpIt9HX65cspWkY5DARyLuaIg3Qaobrxsr8j0c/:KetFXsoB7LGnaobrxe8j0c
Checks for missing Authenticode signature.
resource |
---|
2a454098c78df5f244b2a215c903dee2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ