DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3828e34e0134bad596e7f93d46f62ec5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3828e34e0134bad596e7f93d46f62ec5_JaffaCakes118
Size
611KB
MD5
3828e34e0134bad596e7f93d46f62ec5
SHA1
7ff084f4609200965fad538bf425d6f2e9bff718
SHA256
492b2768d6ce71fb3054bdeec1b50b4cb8eae28d67d57555b129afcf965824e9
SHA512
2bf7638f89508bb537f891efbad6d1b18beb92bc9597708e25be2f57bf6d74034eccc778b662625faae8539a7862833ab0cb404daaf393246b332a72a1bd3909
SSDEEP
12288:FyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvi7AV9YstVBwRHeIBv7pj:F1fqZCHwIr00taCiHR65st2eIBT
Checks for missing Authenticode signature.
resource |
---|
3828e34e0134bad596e7f93d46f62ec5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ