DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3cc07f8036df0590970ac1966c64ec83_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3cc07f8036df0590970ac1966c64ec83_JaffaCakes118
Size
568KB
MD5
3cc07f8036df0590970ac1966c64ec83
SHA1
80b89a1ad0b2412b9a0c95fe61a6fe3ab1858fa2
SHA256
b294a330a9c6e250fb92b59477dc5b7881641e95b72420a93ec8a0aaacb5cd70
SHA512
bdb8b9332a3c659b619af3b7b36914b005e800dfdabd1d7180dc81c69b570d0f1553c979b37a2cb229dc7a58a30909b9d77143af5b5b5d9e0be81cd152f8b4fd
SSDEEP
12288:wHCqAM6vj9ASYe9dPSQBN9KtJ6IMLxaoSDVjEty7uKft6nXkK:wiqTyp3PSQNKP9MLxaoS2ty7T6Xk
Checks for missing Authenticode signature.
resource |
---|
3cc07f8036df0590970ac1966c64ec83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ