DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
687d334d6f88f805eeacacb63fa63bd9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
687d334d6f88f805eeacacb63fa63bd9_JaffaCakes118
Size
610KB
MD5
687d334d6f88f805eeacacb63fa63bd9
SHA1
16f8e9411392f6b14672dc078b995cc0ee75ab99
SHA256
863698b71038364b91673890ffd90adca182f0fd41e524c9e2a16dae219a3a02
SHA512
652bf5cb339e43e9a1cf30c9c82c1acd3c5db37c3aebdd5cff1a37744cdff001c74329ea814a7e606a0c632d1fdbc74a3939b9527a6e539b76ca866cffa18d6e
SSDEEP
12288:DAFp96Ffv/aX/tOo0O00w8NJidSCnTLtb7IffQLoVBwvHeIBv7pj:sFv6piXQob009qSCXpYeoseIBT
Checks for missing Authenticode signature.
resource |
---|
687d334d6f88f805eeacacb63fa63bd9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ