DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6005e010a18120236b58a6a0119aae61_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6005e010a18120236b58a6a0119aae61_JaffaCakes118
Size
634KB
MD5
6005e010a18120236b58a6a0119aae61
SHA1
f47e6c238524d0c4a576d59c1929b10958581152
SHA256
db25d5a5e11ce29d0b77797fc02977c9f0efd3d1e8f5b2def1f74087acf8b268
SHA512
3e0a224292167e47f02e35e524232259b961ac4849bba3e8ffe9bc6838fce4dd34f68f7175bd574634d42eaa58fc9d157d8f588c78335d67de1043d7af979e4b
SSDEEP
12288:PUdtFdMxDsGf7r63P8b5oxP7SMWsXK/owzVBoAhb/fO79s:MdTdM3X24oJlfKlxBBhj
Checks for missing Authenticode signature.
resource |
---|
6005e010a18120236b58a6a0119aae61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ