DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
669a898600faad4530ce19018de3a5ae_JaffaCakes118.dll
Resource
win7-20240704-en
Target
669a898600faad4530ce19018de3a5ae_JaffaCakes118
Size
564KB
MD5
669a898600faad4530ce19018de3a5ae
SHA1
5f30b5fac50cea2c141ad62afff07b6448f76c69
SHA256
90a53d1186753d125a996d99441bf61c153f7e4b03895f960b9014acb8712d2b
SHA512
0aa7d442810064776711e5e6a579e82cc8d369a0cb6e67715060e949e12720b52c8ec009fa6dd21b7cdc4ca38273214cce0313d80d4ac2ed02a7a15099d775b1
SSDEEP
12288:6yawuBvb320fsK0jNnGLwVCSdXA8GTWFWfwk/K81CI66t4xf:9ap9DfDLuwCFWfh/HCI9t4
Checks for missing Authenticode signature.
resource |
---|
669a898600faad4530ce19018de3a5ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ