DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ce4e2640cf48ac0c306dbad86a1ec2c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5ce4e2640cf48ac0c306dbad86a1ec2c_JaffaCakes118
Size
566KB
MD5
5ce4e2640cf48ac0c306dbad86a1ec2c
SHA1
0d4bd1fcba3c7229d46fc7166b7bc5e0b4bae30b
SHA256
001513bcbeb6c2fbac2463cc1b0913decc1a808c58a4a6146c4d359b3569cb00
SHA512
bdee40ee18bfc945edc88c1850e4ca581623f883d06b50b477cda8bf365317b2311b26fa6ad8efb9925a62e66afc95c63b7b376ba0d3aca2eec50a2484a4ecaf
SSDEEP
12288:ryA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrviYz6AiVBwS:f1fqZCHwIr00taCiHR6Yji
Checks for missing Authenticode signature.
resource |
---|
5ce4e2640cf48ac0c306dbad86a1ec2c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ