DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
34d79a3023a2d3ceb3993ed79ba1ca54_JaffaCakes118.dll
Resource
win7-20240708-en
Target
34d79a3023a2d3ceb3993ed79ba1ca54_JaffaCakes118
Size
570KB
MD5
34d79a3023a2d3ceb3993ed79ba1ca54
SHA1
a9be7147b23b3110da547b99f29a1ab83312af7f
SHA256
cbd1246eeb87851ad3db630a7a4e288b59d568c678570a342029d2e44e7b939e
SHA512
f4fb80e1ebaf08ab982e924f52ab6d85aa1b925a1058e68a5344bc43eb67a3b1decf1d0662bc8259a8fdbfc1a4895b19b08b0946f0aeff66e2b346f3f5eed5c2
SSDEEP
12288:zffkjj2RJR5cecTPXbKy1rLyhLLWsd5yZLWvvMQq+Bo:rfgjimLmqctuZLWvvu+B
Checks for missing Authenticode signature.
resource |
---|
34d79a3023a2d3ceb3993ed79ba1ca54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ