DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
350617eba16961adfb0e3377e1aeee85_JaffaCakes118.dll
Resource
win7-20240705-en
Target
350617eba16961adfb0e3377e1aeee85_JaffaCakes118
Size
432KB
MD5
350617eba16961adfb0e3377e1aeee85
SHA1
9787e10d6dcffc94384c7fb375f5187496d918e1
SHA256
d89710ec69f5178937c3a2c881e5f153ed7dad058a1d477ca1444dfcc6db1bdf
SHA512
929056649db15855a589d72ad1b665f61252187818341b59f1512978370a84f7c312c5e582cc88234802034e8560d9d659dc6d0fd86f9afaf8c7817e465a95a1
SSDEEP
6144:2kDLIjA1kQDsj+92NXU/KRDYv5Tlhenkh0Qh7zm/NHWRVSvo3CXauUOtkxsl:1DLIj0kQDsj/ymkhP96u6auSi
Checks for missing Authenticode signature.
resource |
---|
350617eba16961adfb0e3377e1aeee85_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ