DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
78f2ad79f306859d9b62f4a75abd84df_JaffaCakes118.dll
Resource
win7-20240708-en
Target
78f2ad79f306859d9b62f4a75abd84df_JaffaCakes118
Size
738KB
MD5
78f2ad79f306859d9b62f4a75abd84df
SHA1
cf14719da60dc5dd549653eed9eeada638fad8df
SHA256
d2866cbe4e562805e6a9b609de9eedd4c92e2cbf7621c945416ffb2169ebf351
SHA512
af76ac792f5324e40c13a67ae04113bf9f3c2e4cc005e55ca15817ace23dc6ae8362cb067e82cc97d06c1dadd4e3411438bf5dad3dfb066604fdb4878fec6d51
SSDEEP
12288:DoVhZCrnAwfJDO96LjE5mCCM1PFUUKu4Oo6CqxrcEy88wSVBy2tePm:UVzCrdFO90AhPSr4VcEy/V0A+
Checks for missing Authenticode signature.
resource |
---|
78f2ad79f306859d9b62f4a75abd84df_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ