DSvchEntry_WTime
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
602b8e6bfb27ad2685ca9d2a014c27a4_JaffaCakes118.dll
Resource
win7-20240705-en
Target
602b8e6bfb27ad2685ca9d2a014c27a4_JaffaCakes118
Size
1.1MB
MD5
602b8e6bfb27ad2685ca9d2a014c27a4
SHA1
8825230bcbd7f73b2263f5cdafe10a99e9e4f7cc
SHA256
56c5f15c390645c8e10ae23e64f56b23392f58fe20fdb323f0b7fdc54aa1966d
SHA512
faafcfe09d8a9d97915e82d5a7fe6c52b3845a1d47dcbd44c4b0f3e32edcd09a69cb0af76e515424aae078d05e66ca527ae09cbb2e5b13a184a8ccb363a7083b
SSDEEP
24576:8sT8g3fDhQSTiDWCadvGrVC4ScY8X9DatTz+:8sokJmMIn70T
Checks for missing Authenticode signature.
resource |
---|
602b8e6bfb27ad2685ca9d2a014c27a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DSvchEntry_WTime
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ