DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
43923606685ba291370054249ee24e7d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
43923606685ba291370054249ee24e7d_JaffaCakes118
Size
14KB
MD5
43923606685ba291370054249ee24e7d
SHA1
5c2cd2a37644e91ecc5958a21cf8b0a3516443c1
SHA256
65ca1cb993f21b1513e8acda6a8331213b5760b16c9058935b8bfdad1b2e29e2
SHA512
5d87729c84ffa14c1a104843dc9e8fdd09d00625e2b4f7ec480da00e60f0aee0d8048c5e832fbff8d08b5e950b13b112e5b9290e3fc47688846c9d40427d74ab
SSDEEP
192:v4V32SkKvw+djaU8XpsVSgRP9QELCbQN6xcveIQZaNERt27FDVFVzMUFA:vIuKF5JuOVSilh/NBve1Zo4tGDVTg
Checks for missing Authenticode signature.
resource |
---|
43923606685ba291370054249ee24e7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ