DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
477861cca193b2688ab7c82546371860_JaffaCakes118.dll
Resource
win7-20240705-en
Target
477861cca193b2688ab7c82546371860_JaffaCakes118
Size
566KB
MD5
477861cca193b2688ab7c82546371860
SHA1
ec2d7453ac00013d99a3a8fbaf01a9fd8de04ef3
SHA256
01d129ff199b9a116ac1b9da8cac680448d2bb573676ab3cfc21be2972397b56
SHA512
fc2fedf49fa80028ae7edee5570e482b5dfdfedcb88d7154dd83e70232a80449d355e6d822ec8c24854257268d5ef0c2652c16a88c2288ee2abe63d124fdfce2
SSDEEP
12288:DyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOG3aEVcGnNZp3sVBw/:n1fqZCHwIr00taCiHpzaycGnxs
Checks for missing Authenticode signature.
resource |
---|
477861cca193b2688ab7c82546371860_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ