DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4b0a169d80d78549b44a0f0ea4fb0191_JaffaCakes118.dll
Resource
win7-20240708-en
Target
4b0a169d80d78549b44a0f0ea4fb0191_JaffaCakes118
Size
1.2MB
MD5
4b0a169d80d78549b44a0f0ea4fb0191
SHA1
39bfa760351066f333d4fc3053524387c5730050
SHA256
02aa46cd62cd1e27536ae6ebf261492e23a2c8bb83dc0d2473c681c97eec2944
SHA512
84f00331dd0c6dfb5233262a216f314108c85a2c00c19648248e69f45600d1832d954ed6e6d6b303103a57e589b3da7c7d27ed90f2ec07a2ace4902b319efafc
SSDEEP
24576:7XzJMraziZ9yieOodKLZZSuZDlJYJeNcKO7ckyvFuBSXTAZ3wua8ZXRl5xysqE7/:Tz+GEmQLXBJYJeTO7clAZLZzbysf7QKd
Checks for missing Authenticode signature.
resource |
---|
4b0a169d80d78549b44a0f0ea4fb0191_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE