DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3d951cc6c48a9cf496df8c7f2572d23c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3d951cc6c48a9cf496df8c7f2572d23c_JaffaCakes118
Size
697KB
MD5
3d951cc6c48a9cf496df8c7f2572d23c
SHA1
f1fc9338fa8908149ca89d6609e7a1e53c21529d
SHA256
e923263b08bd7c62c3ebfc150107a06bd6078c3d1ea8ea533a498f0bd51c83f5
SHA512
10c211decbb7d20f4288d3913041c9e5b2b1abd0f40750676be96230a710954c8a40089c9a69e40ded223847c2d2e573d78952f6353dbd0afa602644d2507adb
SSDEEP
12288:2BXeruv7jxzDjbhgg1kVUnDl/iYhRIBik9drjAZ0M2C:2ZhSX6nDBiY7IHLAZ32
Checks for missing Authenticode signature.
resource |
---|
3d951cc6c48a9cf496df8c7f2572d23c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ