DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4a71105b6d179831b8f30b9ec5ace23d_JaffaCakes118.dll
Resource
win7-20240705-en
Target
4a71105b6d179831b8f30b9ec5ace23d_JaffaCakes118
Size
435KB
MD5
4a71105b6d179831b8f30b9ec5ace23d
SHA1
170af4f24d0debb0464d2283b0978d0c873a1d62
SHA256
cca51b03b48898102e80c068432b42197446829d784f537fe37b7f97bc26ca11
SHA512
4d5028df8fc0b758872ee8e9bde44f270d1ae1842b52cedb20e704f3887fb3de10cb005fba8010075a1e3c0035a9aa6f4fb501d6307255c804632557e7cd51f5
SSDEEP
12288:CNOTOhyGDZMVwVqTqYwu7iiFQ74iHTY0o:W2aDZM/2YH7XpiHMv
Checks for missing Authenticode signature.
resource |
---|
4a71105b6d179831b8f30b9ec5ace23d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ