DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4786c01b58a2a0bbb14c96628d4704eb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
4786c01b58a2a0bbb14c96628d4704eb_JaffaCakes118
Size
565KB
MD5
4786c01b58a2a0bbb14c96628d4704eb
SHA1
09554e8d8e8d90538a6bea1cc22920967cdd7a30
SHA256
9b9034c3661fc6d37102ba6bb5df9a82f51ae8e017af4cf5520fb9106ab55d4e
SHA512
e5a59c52ce5cea236434372e061d03293bf28082c86e9e213037d8f2a11c3d0e2480900149a31e357650691746d5d0e88c6673c55226b4bd4ef841de84a509f2
SSDEEP
12288:pyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvi1zDPz8KSVBwH:51fqZCHwIr00taCiHR61XPrS
Checks for missing Authenticode signature.
resource |
---|
4786c01b58a2a0bbb14c96628d4704eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ