DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
33ad7f99cd18993438caec12ab9c6d9d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
33ad7f99cd18993438caec12ab9c6d9d_JaffaCakes118
Size
563KB
MD5
33ad7f99cd18993438caec12ab9c6d9d
SHA1
305c37e42ed828f9350909d3b494f29d0711eb6c
SHA256
b49c9e2b6e59fd3d50678f6dea947dd1ddf21bb3d2cafcc1196d616cf23a5aa3
SHA512
8fd98683ff22880b2a66ec533b40dede9f80f2bd0f0ec83a76e69472c7dbccc0d2b7049ad16a99a0c1c438f262397d7cbac730dc466fb840eb77317e81a5118a
SSDEEP
12288:Q0Et9YDc/Tk4Po4wSSqodPF9C2vTgYkcW0hZl7bZQ4t:4tWDcw4o4Ts/9CkkgZl7bO4
Checks for missing Authenticode signature.
resource |
---|
33ad7f99cd18993438caec12ab9c6d9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ