DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2e681f29c4ab2f6a2a65c48b8985abb1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2e681f29c4ab2f6a2a65c48b8985abb1_JaffaCakes118
Size
566KB
MD5
2e681f29c4ab2f6a2a65c48b8985abb1
SHA1
036838d537d7092195a365629868610df870e76e
SHA256
ccce1be1f8f5dad3ef99916a5d09259f1644a781e27b87cdc539f7c5046d4636
SHA512
62cf7d24a465b6b7ba07359702cc68d315dfa7d60115ced9be3562642b6b0acd9e53810496d6c41ead7766b1fff26a9f3638c7d47bfa4ffbdb56129a70da40ef
SSDEEP
12288:XyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvixzbA81M3hVBwHm:b1fqZCHwIr00taCiHR6xx1Whe
Checks for missing Authenticode signature.
resource |
---|
2e681f29c4ab2f6a2a65c48b8985abb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ