DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
634c1fc517767985e5d4588322f108b0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
634c1fc517767985e5d4588322f108b0_JaffaCakes118
Size
610KB
MD5
634c1fc517767985e5d4588322f108b0
SHA1
90844130b12a3a424ab12b0310360979c72e35cd
SHA256
73bfc78803aadf9ad5572bd7e6c9388ae525b0ccd808a7e92b16cdce8c2d4142
SHA512
07c96315176e669af5f8f3bff8086d77ddaa67d9c02fd4e1ae42213322d91cf558e8be11d95ac103675574590edef8e00f3652a8d34c864d0d8334186dbf9bfc
SSDEEP
12288:NyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGrgYRg1l6VBwfHeIBv7pj:91fqZCHwIr00taCiHp4YRgD68eIBT
Checks for missing Authenticode signature.
resource |
---|
634c1fc517767985e5d4588322f108b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ