DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c8c66d3336bd8e1a484e5dcd2f5f3aa_JaffaCakes118.dll
Resource
win7-20240704-en
Target
3c8c66d3336bd8e1a484e5dcd2f5f3aa_JaffaCakes118
Size
536KB
MD5
3c8c66d3336bd8e1a484e5dcd2f5f3aa
SHA1
dc24990014c8e5e1393f829f0976508ee9506cd8
SHA256
4f9832b2fe07c1bb89719d87a1611ecde570076404722d116d5897134e60df0d
SHA512
a6f4d4bc3d2637113a1b9f372cdb0ccd4fb105f31dc3e2d22ae6faa6837694358e1c0e4a56ed926ff0956387019259e8dbb81952db598ed53f8d9f59064e8f43
SSDEEP
6144:DztfzUSH2+QSIbPCeT+Xfb7DiOIcdDkR3oeMzj2iC:DOSH2+xIz+Xf+pcdDkR3Wzj2p
Checks for missing Authenticode signature.
resource |
---|
3c8c66d3336bd8e1a484e5dcd2f5f3aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ