DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5b31fc156da4f25edad833dac0568476_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5b31fc156da4f25edad833dac0568476_JaffaCakes118
Size
611KB
MD5
5b31fc156da4f25edad833dac0568476
SHA1
501641719709dd8bed34cd35ab6487496eb645b2
SHA256
5ba3a23b8c03ea1df76ff2a5c04c5f746397383cfd22ebd26a0078852802355a
SHA512
e6af46c1f3bde78722426b9cdb12232f94f327d74538de9892948c38c48415d092274013ba8893406714b3dbba1263291481abc7b9acc8b74668cf6f3a443b9d
SSDEEP
12288:jVYysM5Ic4nrmfCovMbgPNeLzCR7PH2qiFMfY58X5rf:jKy35I4zpPszCRqj4O8J
Checks for missing Authenticode signature.
resource |
---|
5b31fc156da4f25edad833dac0568476_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ