DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3162197875ac3392a50a81baa502e34c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3162197875ac3392a50a81baa502e34c_JaffaCakes118
Size
656KB
MD5
3162197875ac3392a50a81baa502e34c
SHA1
0502e6c354a53f0644bf9728a8f52e32de42a2f3
SHA256
96a964bf86b21c7c02fb699a223bf2347af1421d519e5a787e3069fb86f8efb6
SHA512
e94b916c15e261084c9c57d4ea494710f6092eb5bebb37fcf041d239b2cca5c439223a9580a889bd25f088862b1a271a52548a05ed6b23a33f2eadbe85687dec
SSDEEP
12288:0dmHldG9b6P8j9UhgGSdv33OGpdC+cWZ3Np30T4FiE+H9sDL4HeIBv7pj:0QFdQeGuuGSuGW25AuiLHQ0eIBT
Checks for missing Authenticode signature.
resource |
---|
3162197875ac3392a50a81baa502e34c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ