DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d9c559f8e88662474ad6ad73a681b35_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3d9c559f8e88662474ad6ad73a681b35_JaffaCakes118
Size
439KB
MD5
3d9c559f8e88662474ad6ad73a681b35
SHA1
15cf005ad9826f11ec3046cfc6cdd8ae5a46a4ce
SHA256
a5f5fb1f9696a5d32b8bc6180cdacf3348543da0011cc6ffeea3eec0c163bb36
SHA512
a0fb2af44747746e8e7bc274e48e29a98a4aee70984a76b5e158856b6e3e2c0ce0e69b37769bc58ef3e375a10f41b7da60e6fcbf7402e7b9283a20a22183e5ba
SSDEEP
6144:eBpxf38bseXaX3E74s2dUwyZY/7DvYvbvBHFc8k71fhATJpVdIfei0eAWsJvbwEP:IDf38blKX3Er1LXk7FuTs2LeHsJzeZwF
Checks for missing Authenticode signature.
resource |
---|
3d9c559f8e88662474ad6ad73a681b35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ