DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
64c6379cb899edb8117323e2bcceac95_JaffaCakes118.dll
Resource
win7-20240704-en
Target
64c6379cb899edb8117323e2bcceac95_JaffaCakes118
Size
607KB
MD5
64c6379cb899edb8117323e2bcceac95
SHA1
03c55b35281645388bb3cdb7f0ca2f194c376252
SHA256
ae6b6aeac77159ecc23b49769a3d4b04c57d1159915c7acccd636a6dd0f1bb58
SHA512
c0eeb80c503e2fea90a12490a1b9f93c01d3ec5e79a309fa62a6f3529803c7c72d666f69646b2161ff0ed3726dd005b5209a8ffa96a3962f9ac5055dabc49253
SSDEEP
12288:CpIt9HX65cspWkY5DARyLuaIg3QaolQrRmkPW40Z/:CetFXsoB7LGnaourckPW40Z
Checks for missing Authenticode signature.
resource |
---|
64c6379cb899edb8117323e2bcceac95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ