DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ea33f527f7d78e4077eb53d7a02e42a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
5ea33f527f7d78e4077eb53d7a02e42a_JaffaCakes118
Size
607KB
MD5
5ea33f527f7d78e4077eb53d7a02e42a
SHA1
0ae4374e420e19eaadbba11bd557da14857862c7
SHA256
b4e6c270c7c767b4b2144d0c928efff12fec197d7854d514cc4d8550b2d7bc42
SHA512
8372f5f8f18048b048db3e2c1a2c1df60a289d4496a7068c5a16392d2367bca375d9ada67d812bad091afd63f3f647d5617157c8a17045396e205cbd8b160e2e
SSDEEP
12288:CpIt9HX65cspWkY5DARyLuaIg3QaoDrdnsOyF0c/:CetFXsoB7LGnaoDrByF0c
Checks for missing Authenticode signature.
resource |
---|
5ea33f527f7d78e4077eb53d7a02e42a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ