DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
41b8acbdbd6c627bd68faf1c5b61dc83_JaffaCakes118.dll
Resource
win7-20240705-en
Target
41b8acbdbd6c627bd68faf1c5b61dc83_JaffaCakes118
Size
767KB
MD5
41b8acbdbd6c627bd68faf1c5b61dc83
SHA1
6010aefa4f6f0236559bac405626c059c0357ee7
SHA256
42571b34c464f85ebfac53d36521caca50fb1ce535fd3b7111d357418854a5ed
SHA512
68346b5dad5cc1c583afa2c725f73beb1aa65d1b820d9e039122727d9649cf88d44c1717d76d5afd4a834e5520b977af99d5c0d5a37c3450c74ff6c17b460d33
SSDEEP
12288:yHCqAM6vj9ASYe9dPSQBN9KtJ6IMLxaoSDVjEty7MjPq8zA0jLryMl9:yiqTyp3PSQNKP9MLxaoS2ty7vGrl
Checks for missing Authenticode signature.
resource |
---|
41b8acbdbd6c627bd68faf1c5b61dc83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ