DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitEntry0
Static task
static1
Behavioral task
behavioral1
Sample
472f8bf904912391a18a85e0b10514f9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
472f8bf904912391a18a85e0b10514f9_JaffaCakes118
Size
208KB
MD5
472f8bf904912391a18a85e0b10514f9
SHA1
68644fdab11941cf73b8b99b39faa33d26cd6d98
SHA256
e20894d6e37522bda582ea7a81415115389e203dea6888ec712db55381e9228c
SHA512
cf23f628edb826f54bc122d7743185b5f438a24ae1cf7786c0a0c82014f107ff7d2b90461447b78ead06a811ba99f0e66c1b03262b2c2db8ed043243dab01420
SSDEEP
3072:Vq2PjVJOgF1NcsLsEmmQYVM27SKcmvhSCH6aGjodBE7F7NgoW3dEW62ocjXLH1:s2PnhF7cstQYFpStaqodBaF7m
Checks for missing Authenticode signature.
resource |
---|
472f8bf904912391a18a85e0b10514f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitEntry0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ