DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
730b8dac27d8e44b88a1304e600f7724_JaffaCakes118.dll
Resource
win7-20240708-en
Target
730b8dac27d8e44b88a1304e600f7724_JaffaCakes118
Size
804KB
MD5
730b8dac27d8e44b88a1304e600f7724
SHA1
77f8406353f2840bfcfcbd148899c97bf2e7d95c
SHA256
3890bfd00ecfd111589e1cb70457ba80eb5aceb3a263920ebe718ec44a1f6498
SHA512
a14d48ff90c5e3a692aa77e940c2ad46632d3babb0e59732e8ed74955c9173a07c40d5a840c44396911ecc430223f1a0280ef153d3b3f6439c2bccaf6155a523
SSDEEP
12288:NYHAQ5dzOzKa0A9Gl3g/lPdkI7zmWjKOg5anWPiz99AKk4yAeEPHUSg+:8A7zx0QGl6xaeg5UWP23AKk9aHUx
Checks for missing Authenticode signature.
resource |
---|
730b8dac27d8e44b88a1304e600f7724_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE