DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
340ec347b27c9449d23b772125deb62e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
340ec347b27c9449d23b772125deb62e_JaffaCakes118
Size
656KB
MD5
340ec347b27c9449d23b772125deb62e
SHA1
a5a5ce93c07d8b1a86e66787c950fced22631ceb
SHA256
432e71b9fe7c38b86e06dbeb06bdac96dccea803c76337b44804cedcf519176b
SHA512
2009e55d08bff5a99b054c3bc362ab7ba0ac8e15bf60c3ff9aae5d17dea904d641331f272b5dcf491ceb30eccd151a4887c7b6329c4a4f0c50f14a824de6bf97
SSDEEP
12288:4dmHldG9b6P8j9UhgGSdv33OGpdC+cWZ3NlnUcwWlH9sDLpHeIBv7pj:4QFdQeGuuGSuGW25vnUcwOHQNeIBT
Checks for missing Authenticode signature.
resource |
---|
340ec347b27c9449d23b772125deb62e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ