DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
37f06ec5a9d10c6338ef6aa43cf340a6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
37f06ec5a9d10c6338ef6aa43cf340a6_JaffaCakes118
Size
596KB
MD5
37f06ec5a9d10c6338ef6aa43cf340a6
SHA1
8db8f67587dd270fcad837c39bf0662c427b9485
SHA256
cd9b9ce70e1d79c02ec5159f1d0a0f8acdfb72d2dfa84be9b820466de6bac9bd
SHA512
5f772205474c7c5b1f191aec807b6e154ba6aa5cab79eddc13fdfbe3dfdd0f8da6308ff0bde681cab88fe9ab964c37c3b86d5eccf82326d8fea098d399a585c6
SSDEEP
12288:usukklWIbKdQRJbQlbqWya5cs3NQqGnv1ieFk6lC:uvkSWh+OlPya59QqG9dFk
Checks for missing Authenticode signature.
resource |
---|
37f06ec5a9d10c6338ef6aa43cf340a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ