DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
59e0bd46e40b70c017599f13ea2d4741_JaffaCakes118.dll
Resource
win7-20240705-en
Target
59e0bd46e40b70c017599f13ea2d4741_JaffaCakes118
Size
634KB
MD5
59e0bd46e40b70c017599f13ea2d4741
SHA1
a5f768c8e335df9ddfa15fa9e06e1ebab863aed8
SHA256
c008902a839e7287fdb00a6e96d93acd64f7d766f8debe1f10d9b13f1b712c7a
SHA512
5f823d8748d1ed4a706f9406fcd82540ea2317a8bf7136660f1f3a3fc545643c27f68a97d1a5b58a1d82370539a5d439027b28ad4ad4ac3ab71c7b60f20aa726
SSDEEP
12288:+M0t9FNcxDMmfrLAF8rZIRf2MmsXacEIJhM/fO79s:2tjNcXnVInvabohc
Checks for missing Authenticode signature.
resource |
---|
59e0bd46e40b70c017599f13ea2d4741_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ