DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5e2a0c04f7e116cb71b6c1892fdf59f2_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5e2a0c04f7e116cb71b6c1892fdf59f2_JaffaCakes118
Size
155KB
MD5
5e2a0c04f7e116cb71b6c1892fdf59f2
SHA1
160f83254226adc8e06b7a231af22b86cd67277a
SHA256
1590f2b6b56c2de05777921845999829ccd7b71f344e2b7b9fad2f421f4cb66e
SHA512
5d7be573f915a2590b7fbcbb04c93e243410086ee3e011781263eb1d6cbf885aa1ebd5b23e0528eb77e154462135ce51dc9ad5809cb93633599c25450ee3aaeb
SSDEEP
3072:A/TbfTH/+CLiq6QDqAZBdqBqcL3oa7Qs5VrKcT9hXfJUjA9F5i:ArbfTGCL962qAidLQs5VrKcT7P+j
Checks for missing Authenticode signature.
resource |
---|
5e2a0c04f7e116cb71b6c1892fdf59f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ