DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4789b91e3f651a46119b2c292e3b426a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
4789b91e3f651a46119b2c292e3b426a_JaffaCakes118
Size
641KB
MD5
4789b91e3f651a46119b2c292e3b426a
SHA1
29a7d34a6861fc6d85f7eecb591a62493ea5c516
SHA256
256aa1d5aa6f1767175aa3ff972546927ad4bbe9d2de301619ed97b76ef9ad05
SHA512
c89c4e1c5eb218df7e674f0503fa7f42624a49e1bcd554d95f96e343722f799ee10b6611c01f9764c6e899fc3db7cff3da30b78f2618aae788966969ccf2c037
SSDEEP
12288:g0Et9YDc5DMWfT44XUDxoyiD02sHtag64Bhcl2tePm:ItWDc/EXouPtz64hwA+
Checks for missing Authenticode signature.
resource |
---|
4789b91e3f651a46119b2c292e3b426a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ