DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5bcbeb095b63edc87bd9bd7e8f3e27b0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5bcbeb095b63edc87bd9bd7e8f3e27b0_JaffaCakes118
Size
12KB
MD5
5bcbeb095b63edc87bd9bd7e8f3e27b0
SHA1
e0821e205d469c1def875f3be3a3d55ba201265c
SHA256
83139fb93dd3c3331d96c0037e26aa5b95f4993dc8235da69ec12393fa24913c
SHA512
f7ea4b41a6d5df6dcd49419ec966351726f394a488ccd516fecb919b3fc22b4e95b649e3d32e2606ea66110f2e89e18bcad1ac09aab58f7013b6ef145b1838d7
SSDEEP
192:WkLsTHJlYLCK6bEo2zKrWEuY3TQ+ZPLQ+leEFwioAohS+Kn3/G8QA5U+gThRz:ktjLCRKEA5TY
Checks for missing Authenticode signature.
resource |
---|
5bcbeb095b63edc87bd9bd7e8f3e27b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ