DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
450e9dfb8c98d4b6b986b1c1ca36cab7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
450e9dfb8c98d4b6b986b1c1ca36cab7_JaffaCakes118
Size
435KB
MD5
450e9dfb8c98d4b6b986b1c1ca36cab7
SHA1
15b1e6e55110c31fba824b67b6a5f448452e4baf
SHA256
9bdabf3623509b15e8af70ba2aeb642abe9a408da0a8f4dc51b7a43a22972c4e
SHA512
09ce6e0a4e2279668fed928c4b735754342273abed136fe8dd4eed7465cb117dfd7b1640b5f4da9aae8b1e53408f589be0824132fcccec70d3d166d89698963c
SSDEEP
12288:CNOTOhyGDZMVwVqTqYwu7iiFQ74iHTY08:W2aDZM/2YH7XpiHML
Checks for missing Authenticode signature.
resource |
---|
450e9dfb8c98d4b6b986b1c1ca36cab7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ