DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4698e5f9dd70abcb46b22e84141ec183_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4698e5f9dd70abcb46b22e84141ec183_JaffaCakes118
Size
451KB
MD5
4698e5f9dd70abcb46b22e84141ec183
SHA1
fcfcb5799e9520fdf83dcfc156868ac2a28c44e1
SHA256
c12b53db3c53eec43f39b5e089782f8c5eba3ea8f51a1f37c6e21abd08b6ec4d
SHA512
3d22af58194db9fb0113b40a613acf7b58c7086f2b3f8f3cb8b84319154400e1efd5b325f157de0ffd837afc7e9b7652120796112666e12e644739a72fa3e4e0
SSDEEP
6144:PCsStDUsws+GgyLCrlHwzD7k/uikYvkSwZqj7ivZA4dRvAUY3jlfRuWkYdvS3pil:6sStDUVpyLMlsGj7uSo2pZuW3qZI
Checks for missing Authenticode signature.
resource |
---|
4698e5f9dd70abcb46b22e84141ec183_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ