DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
70a2f99ee5392508631953aebaeaed73_JaffaCakes118.dll
Resource
win7-20240708-en
Target
70a2f99ee5392508631953aebaeaed73_JaffaCakes118
Size
713KB
MD5
70a2f99ee5392508631953aebaeaed73
SHA1
32f11f45f11c6a671550fe8fe71970c1c28e0297
SHA256
41686cea209aed2506f8a019aa1a9831842802fcd96aca54c063bcd347ec144c
SHA512
ca2c1e74329b43ca36408eb261204e38ae6e1cbc1af7533fbf687fdc5aeb9928d9e38f7f4c066f65d0ac6dffaca75c4b42022885f0c41d4611f1bc1960a60d11
SSDEEP
12288:YuHoda/2cfWASg+zL/IcddKoXiP1LxGS1NbM1jCE8qNJrbV1RU:/oCd2//ISK2y1Lxz1VtE8CJXZU
Checks for missing Authenticode signature.
resource |
---|
70a2f99ee5392508631953aebaeaed73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ