DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
444f9e63a807610b5a538d9d16664508_JaffaCakes118.dll
Resource
win7-20240708-en
Target
444f9e63a807610b5a538d9d16664508_JaffaCakes118
Size
567KB
MD5
444f9e63a807610b5a538d9d16664508
SHA1
4a11e427ca25bfb36619af004cc28035493d04c2
SHA256
bd3f2a97b6fde4d2d2e2d1594111ce2e35e4122a4ace797a1aa1c25b3bcb6c5d
SHA512
e4be306ab5bdd136b3888d7f75841beaeafcb1797770c23e3e70511c7b890dd5d5307ec8bad2458485f276801687084db7c300e8757edc3994e3b74776ca42b2
SSDEEP
12288:vHCqAM6vj721fUXMgf1PuLpHz9vw8Gjk2PunPag7Pcet4VF:viqTyO6dMLvwos0nr3t4V
Checks for missing Authenticode signature.
resource |
---|
444f9e63a807610b5a538d9d16664508_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ