DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
738829df1a670cb6f14c34dedae54a08_JaffaCakes118.dll
Resource
win7-20240704-en
Target
738829df1a670cb6f14c34dedae54a08_JaffaCakes118
Size
824KB
MD5
738829df1a670cb6f14c34dedae54a08
SHA1
6322e52f61e39d4d353501d92a579cc4146bc32b
SHA256
d06b6ac59e65ec467efa2c5567a25456fbbb2f66fd3738edef9c5fae6f400a88
SHA512
2d030aece54b32b8772a412a8dc7da47cd4f4587e9d8fbd3738fc040722284d0b475aa569ce79eaa162d7b4e7506bfdae93053bf6fde15a70ec315240349f240
SSDEEP
12288:WGyQNny+CYQbiqERM3s082TSFMR9OKFnQeyMRRpJ53YhMYHI3lf8Q93YP:W8k+2biqE63sAnfFQqRRpJ55YHIV82Y
Checks for missing Authenticode signature.
resource |
---|
738829df1a670cb6f14c34dedae54a08_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpy
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE