DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a3f7cfcec0adb6023b715f394ff0f9a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5a3f7cfcec0adb6023b715f394ff0f9a_JaffaCakes118
Size
561KB
MD5
5a3f7cfcec0adb6023b715f394ff0f9a
SHA1
7605f8b6f3c58fe99ebdc2814c14efe53d549a1d
SHA256
e409e3cd97011cbfccd2374cafa15a8c5400d7a79d216a3835c9fcb2cced664a
SHA512
7c9df8be21a483cc72bec665a5f06721130cd499416e481704c8062b978b4b8808468a4e0f6eaac55d4b424bb0f26ab0c24a2b93091de477247aa2a0fbbac7c8
SSDEEP
12288:cgUV94y09yxH1az44i2JiU5VVNIUOZH5by2dJRiWa:QVGy0E04wskIZHMEJwW
Checks for missing Authenticode signature.
resource |
---|
5a3f7cfcec0adb6023b715f394ff0f9a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ