DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
30d0f20ee860371fd0b8e555330809ff_JaffaCakes118.dll
Resource
win7-20240704-en
Target
30d0f20ee860371fd0b8e555330809ff_JaffaCakes118
Size
607KB
MD5
30d0f20ee860371fd0b8e555330809ff
SHA1
6bfc522a11700a7588828fb91aa12183a187da00
SHA256
10be0b0416e577ed6ba4591ed51b12b0515deb0071bf62c1bf391ce07a208cf2
SHA512
d6325396813073449404c8e1ce7125fdef229e89c34cba1a74d8a9fb2369e74f4bebd927a65947c3576466d0a8eade2fdc959e8245c0f7f485d9b1aa2ebff808
SSDEEP
12288:CpIt9HX65cspWkY5DARyLuaIg3Qao+rbf6TH0b/:CetFXsoB7LGnao+rbiTH0b
Checks for missing Authenticode signature.
resource |
---|
30d0f20ee860371fd0b8e555330809ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ