DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5c4f0bdc5fc5f44bd770efeb067112b6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5c4f0bdc5fc5f44bd770efeb067112b6_JaffaCakes118
Size
112KB
MD5
5c4f0bdc5fc5f44bd770efeb067112b6
SHA1
0df4a4d00c142ba4f46607ffae88fd60ef0845a1
SHA256
e4e73b94e13b3ed867eb126adc160543fe4534552b2e567d5fe5edfdcea1068f
SHA512
a67c922ef4c8f6e99e9eb1ebe5c300193a757e6cf16b6e8d9ce35fb0aa03c9bbc5b23da146a1f00253d0e48c799a27dd6dbe12bbdc711eb2759ad4121174fffc
SSDEEP
1536:PdXCNh6/4lgD224RAk4cGVPxzZbMhQnBdbpaQAylu0NiBKVJEGSL3TuLbkN:FCvoD2fiCGWQ3bclVGSKVJxm3TuLoN
Checks for missing Authenticode signature.
resource |
---|
5c4f0bdc5fc5f44bd770efeb067112b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ