DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6f3652ab2d98744e86fe6a727392ae67_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f3652ab2d98744e86fe6a727392ae67_JaffaCakes118
Size
1.5MB
MD5
6f3652ab2d98744e86fe6a727392ae67
SHA1
c9902505ca0fda3bd77555446c64c673e8e279fb
SHA256
cc314bfb3bae7ccc97e8ec0857b62f22f97af2f66a83349bc9b774f898342b9f
SHA512
d2cfeda5e57fb9dd17baa80aa09288f18166a3efc9da0a67c2e796e2e353a9a806eed203e6b79ad7ef53607628b2ab42d1d1a5c441f00ec05129f41850be6a6d
SSDEEP
24576:av5nVN4rTUvJMxzwY59n6Qe8id2c8m6rrVyW3XUaOE4nKMzEUfUA+rmNBy1:avxeoKxzwY5feZ0AuXUsF69+rmN+
Checks for missing Authenticode signature.
resource |
---|
6f3652ab2d98744e86fe6a727392ae67_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ