DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3e64663a5e0f7d132dbd83e79e471065_JaffaCakes118.dll
Resource
win7-20240705-en
Target
3e64663a5e0f7d132dbd83e79e471065_JaffaCakes118
Size
889KB
MD5
3e64663a5e0f7d132dbd83e79e471065
SHA1
a66597d2a39734b45361e75967ea6affac1efe75
SHA256
d0a36b6ecc84cf5dbfaa9af4dcd1177bbe1c41185b6a39226f412633973ac1a1
SHA512
ce9eee73d47720e419e9b80374c3fa9899126d0effb2188e5429bc5d9cd950f5e80d8ae1aa2bf413da1f65aec94656eae2a74cb1c3c3061a8e9cbcc3b6d322ff
SSDEEP
12288:pwScAcHkIZTN1hhP5bVA4lKSqVgxKOVByrQPifFzdmz+BuYCNDs7uvsvb:m7Lk4hhRbe4USygFmQkNe+Msvv
Checks for missing Authenticode signature.
resource |
---|
3e64663a5e0f7d132dbd83e79e471065_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ