DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
681a39b8c714fcb849e4fbe8a05195a4_JaffaCakes118.dll
Resource
win7-20240705-en
Target
681a39b8c714fcb849e4fbe8a05195a4_JaffaCakes118
Size
562KB
MD5
681a39b8c714fcb849e4fbe8a05195a4
SHA1
c495176646924a19977ecfc4e5da9dfe024b630c
SHA256
c93e0a27ec22330a82683417c1dcd3fa719fb3a9479071d1814595c6342dd83b
SHA512
cdf1024a06ab6e98cd41bb6f3de1c33217c5caa10f083469f94d121f1a85039f90cde9e48ac02a7a2f49b025cf46668093b346711b88d0ff7ec5f407f8efafad
SSDEEP
12288:00Et9YDc/Tk4Po4wSSqodPF9C2vTgYnAi7RD:8tWDcw4o4Ts/9CknrR
Checks for missing Authenticode signature.
resource |
---|
681a39b8c714fcb849e4fbe8a05195a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ