DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
49bc3d9a66ab4c359cf393021e297d78_JaffaCakes118.dll
Resource
win7-20240708-en
Target
49bc3d9a66ab4c359cf393021e297d78_JaffaCakes118
Size
634KB
MD5
49bc3d9a66ab4c359cf393021e297d78
SHA1
205006a5792818753183858e6b0208d09816df07
SHA256
a84a57a51532e8f5be2faa85c0d82e28e66379302ba8e45b6338e26fec6747ed
SHA512
d78d2c84f46f15342e0ee8051add409d11d1884aa697614c18952c2cc082a48b1dcfa943e4bcf36386d17dd0673aac0eae49bb9c0076941969ea2c7f86b6e4b7
SSDEEP
12288:uM0t9FNcxDMmfrLAF8rZIRf2MmsXaw0WJOhf/fO79s:GtjNcXnVInvaoUhf
Checks for missing Authenticode signature.
resource |
---|
49bc3d9a66ab4c359cf393021e297d78_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ