DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5da230158272a0c4137a637184c8ef2b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
5da230158272a0c4137a637184c8ef2b_JaffaCakes118
Size
596KB
MD5
5da230158272a0c4137a637184c8ef2b
SHA1
8ccd6162f9e33540cee8cff1ee36693c1ef60fb9
SHA256
d86a955fb7fbd6166a63f1e165cb0e270eb7f7ff30c7e4807ff358556b3861a2
SHA512
f59af8a92bb801514722d60f3a7aa905a65973a52abcee43e37e2b12182b17570458b1ed3fec20c758d08c177cdb5582df28f22a980d983447ef4637220a1e93
SSDEEP
12288:5sukklWIbKdQRJbQlbqWya5cs3NQqGLv1HQhKQk6ly:5vkSWh+OlPya59QqGpHQhPk
Checks for missing Authenticode signature.
resource |
---|
5da230158272a0c4137a637184c8ef2b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ