DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2f4902764806b2cbba1d530704c94cc7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2f4902764806b2cbba1d530704c94cc7_JaffaCakes118
Size
708KB
MD5
2f4902764806b2cbba1d530704c94cc7
SHA1
c1620c8a89d36671776134a36bfb2126362aa363
SHA256
c4bdc269d41399a0eff0127be330738c8c8665beb2c59dfa6db011e720aaa761
SHA512
ae1677c53ef14eb08d15926d83ece6034ee979489ef2d81ceea62491c76e3da9ff54d482a002fb3df34565672bed8c703e32b05dccfc7f2023b4104bbf836549
SSDEEP
12288:7Vn8T2FqWmpy+pnW7VEdIP9r9FLLaOW3kAmJO1RW8QR04bvEF/21xo6o2HeIBv7B:p8TpWUnYh9RaTkf+01A/2s6zeIBT
Checks for missing Authenticode signature.
resource |
---|
2f4902764806b2cbba1d530704c94cc7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ