DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4af738f6057a719f81ebd4dc8e67eee3_JaffaCakes118.dll
Resource
win7-20240705-en
Target
4af738f6057a719f81ebd4dc8e67eee3_JaffaCakes118
Size
609KB
MD5
4af738f6057a719f81ebd4dc8e67eee3
SHA1
4d759618ee9d10c312cd3812a460bcc0ac529e38
SHA256
d597af0498ebceafbf59bf9f046f97267bda9137b8e7fbe131c8193d44048c50
SHA512
1ffab1d449456093825bd8bd82e3bd98aef247b793a015c7b38b93ef2d61a74544a291f0bea9331d3ca463ccc6c9ef40d4652f369370292a0002795ba4c0c3b7
SSDEEP
12288:oAFp96Ffv/aX/tOo0O00w8NJidSCnTLtb7OR9sPVBwYHeIBv7pj:dFv6piXQob009qSCXpRPveIBT
Checks for missing Authenticode signature.
resource |
---|
4af738f6057a719f81ebd4dc8e67eee3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ