DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c1c4bd0bcb4ab86a354141dbafc2f9a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3c1c4bd0bcb4ab86a354141dbafc2f9a_JaffaCakes118
Size
550KB
MD5
3c1c4bd0bcb4ab86a354141dbafc2f9a
SHA1
4ab84ed90f0f364808e1ec71f2241b476bd2bcbe
SHA256
861bfb0b33cf86485b438e0a71980b4a5f6358485e3d8e8f8364da95e0687320
SHA512
b79ee77d74f139c1c1a6e346568af2a8261286b208c4c21c1e854b50bf1fb031394cdd4df8c7a41a079e6e62db890d042c21f9ec26904a74c872108f9ccd0f68
SSDEEP
6144:ImzhCbVsOiRfUxy8QV7sY2ts6EMk+w/6Rg1dBjwgi3BmvsNrKVpAzo6PtVjAJ62o:ImzGcRfUxyDAsD/yRksgZr5cC69
Checks for missing Authenticode signature.
resource |
---|
3c1c4bd0bcb4ab86a354141dbafc2f9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE