DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5de7a93a64ba290d965474de88f46ae0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5de7a93a64ba290d965474de88f46ae0_JaffaCakes118
Size
568KB
MD5
5de7a93a64ba290d965474de88f46ae0
SHA1
a78bf4e3ce50ab03f80ba979954ca88c3b3e0b31
SHA256
2cbf8ea275fbd2610b6f9bddc287105aba9dab83d807962064cedb13bd9ef18b
SHA512
08b14ab55ecfdf76830467cd2f1e28189792fa27fa5c6274729c12bd1e3e4dc316fd3680f6ad4ed024abc90fc67a8c78c76ed6eb2c3dbd2cf6fc87c5d0abe763
SSDEEP
12288:THCqAM6vj9ASYe9dPSQBN9KtJ6IMLxaoSDVjEty7ed6JGR:TiqTyp3PSQNKP9MLxaoS2ty7edP
Checks for missing Authenticode signature.
resource |
---|
5de7a93a64ba290d965474de88f46ae0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ