DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
35aaded8196007f866440854c09691aa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
35aaded8196007f866440854c09691aa_JaffaCakes118
Size
565KB
MD5
35aaded8196007f866440854c09691aa
SHA1
3519142fae8940a3007e73141d2aa1ff546da2bb
SHA256
0baf9abf25af81a5e381871595df0380e05f15e12f7be17b37d9531c736d7499
SHA512
3f8d974bbcc8164e59103c7abbad0f8bb87f309fc3043b98a59859e10e6eeacf58cb0090f193d50144ce540b1e0cda9f9f67a53bff618494fe95d1a90d05245c
SSDEEP
12288:FyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvi6ze8jODVBw1:F1fqZCHwIr00taCiHR66S8yD
Checks for missing Authenticode signature.
resource |
---|
35aaded8196007f866440854c09691aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ