DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
737b0985a28b5cf715e455d02edfb4a6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
737b0985a28b5cf715e455d02edfb4a6_JaffaCakes118
Size
565KB
MD5
737b0985a28b5cf715e455d02edfb4a6
SHA1
9034afe8526dfa5e0e6ea036ae0bd7dbb6d1a9c1
SHA256
5c2ceba5ed49f65c327f359090be0d2b5278d363ef73348461886fcf231893e0
SHA512
4ef51bd1e6b7f3215feac3d6e2ff12a23d39ee2d149de88c1dbe98976dd905c7c5d9db4d3a196c0808077dfdc81a4ab073bd59f90c7b1f207d676c8b53f58d94
SSDEEP
12288:ZyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGCZZWdwVBwj:J1fqZCHwIr00taCiHp+ZZOw
Checks for missing Authenticode signature.
resource |
---|
737b0985a28b5cf715e455d02edfb4a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ