DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5c8685dacf82a594b9d05600c4189d14_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5c8685dacf82a594b9d05600c4189d14_JaffaCakes118
Size
635KB
MD5
5c8685dacf82a594b9d05600c4189d14
SHA1
37b71f3ec9bbda08fc7e5e0bcbac06ddf8eff894
SHA256
1974c7e29db9f3eeb3b5fa326a02023e65ab4470ccdae52fc86ed5e3663e4589
SHA512
147e497580245262bc8970a7d185ad51a19625c262b7867a183e9dc41558b965c96ab581b06e9cab558602b7254003fed667380584464b954d9b916521ae6104
SSDEEP
12288:wM0t9FNcxDMmfrLAF8rZIRf2MmsX4eZT/iTh5/fO79s:wtjNcXnVInv4ep/EhR
Checks for missing Authenticode signature.
resource |
---|
5c8685dacf82a594b9d05600c4189d14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ