DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
4dd0ccc0336deaef48af7215d2eed5d1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
4dd0ccc0336deaef48af7215d2eed5d1_JaffaCakes118
Size
435KB
MD5
4dd0ccc0336deaef48af7215d2eed5d1
SHA1
102af382a1f2130a4387c7dba5fa7ed2bebe35ee
SHA256
dc4b528cd99b897b8268d00a849b1d845521a9d844133162244b07483be1c7df
SHA512
d692f3153db4873697f72cc9f057ffecbecb8c38278eb851af1b584c36a8f7ae6c08d8c877e6ce3edbc755ec4ad15afbdc7e8c76c46c45617f5e55cf24c935a7
SSDEEP
12288:CNOTOhyGDZMVwVqTqYwu7iiFQLVviHTIEA:W2aDZM/2YH7XEviH0/
Checks for missing Authenticode signature.
resource |
---|
4dd0ccc0336deaef48af7215d2eed5d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ