DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2b0e3de169629fa99cac0f63c44210d6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2b0e3de169629fa99cac0f63c44210d6_JaffaCakes118
Size
669KB
MD5
2b0e3de169629fa99cac0f63c44210d6
SHA1
4c905c995c7667e07eaeb0ebef495bfb2b0363b3
SHA256
c5c476b81eea0a8bd8a812368635137869bfa4c9ef9d8cf3eeff4c01fa96fec6
SHA512
f2c53805ecf9e42ca4c8983f2afaaae0e2d82f2481ed2f0306bab364163c8210cfb36eed4d5d984140002fd613930cbc5a5f85fe6c0ee363d789fa2e671dda2d
SSDEEP
12288:IIukUn4HHRaIsGyLmOtEAtk/1+JsHgWl9/XHYmBL38C3gA/fO79s:IrkM4nAJDL/yLHgw/XHYmBr8sgY
Checks for missing Authenticode signature.
resource |
---|
2b0e3de169629fa99cac0f63c44210d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ