DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
329c8c8025b0c4775a136145ae380daa_JaffaCakes118.dll
Resource
win7-20240704-en
Target
329c8c8025b0c4775a136145ae380daa_JaffaCakes118
Size
611KB
MD5
329c8c8025b0c4775a136145ae380daa
SHA1
104e74427eafe34dc238d793d982ce5de6ae95ab
SHA256
1d3caa258ca9ada58eb89ddf40d0d39f39f4d25d9e48f66bf02ec50432b9d83b
SHA512
e89274ab499a4c69cc6aa3cb57b81d6546e26f31777b679958036aa92991a8fb512831247c2c0ffe0b1003c2ee91413508e2a7afe4b8c676f44fb901a0471f38
SSDEEP
12288:DyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvi1AKDXVBwAHeIBv7pj:n1fqZCHwIr00taCiHR6ZXreIBT
Checks for missing Authenticode signature.
resource |
---|
329c8c8025b0c4775a136145ae380daa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ