DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6199dc279e8bae9a4661f502a8c0f161_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6199dc279e8bae9a4661f502a8c0f161_JaffaCakes118
Size
1.1MB
MD5
6199dc279e8bae9a4661f502a8c0f161
SHA1
9a3d35144c5fca0417fa9c66a93d7862dc7fb87e
SHA256
db54027cc2e02b425b3ab2bb4787c0656a1baaa4d55bf0fb5885afb1b8748be1
SHA512
4a1f805815b38ad4682eb88dcfb32540c7962cca69e51e416fb428583e720f2189f75b1c06d6242b29ee4f3bf6e7ea77a6204295b2b6fcfe7f65bf1c3f6a097d
SSDEEP
24576:YcCXxP469D2TKi/fc2JGp97SmrVJM1bjloOFoTiBmR8VTVBcRps4:YcIw69D2TKi/fc2JGHtIP5awTgRps
Checks for missing Authenticode signature.
resource |
---|
6199dc279e8bae9a4661f502a8c0f161_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ