DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
82e09d62853e1d10e6515b01cc7973b1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
82e09d62853e1d10e6515b01cc7973b1_JaffaCakes118
Size
563KB
MD5
82e09d62853e1d10e6515b01cc7973b1
SHA1
3b79c9b1e5389d710d44ec6cb3bed82fb51ba334
SHA256
b98307fb2534972f3ebd81628d785e71b97dd6f0cc84493151af25e46cf929be
SHA512
e859356766586bcdd06b7f0e66c5216d820fbf19f99b8b3090c4615156814757eea30cb8e4b44ae896602b1985b13456b9105183734fadbb323f767bc1a85762
SSDEEP
12288:M0Et9YDc/Tk4Po4wSSqodPF9C2vTgYkc1X1oGb/q40:UtWDcw4o4Ts/9CkkA1dbi4
Checks for missing Authenticode signature.
resource |
---|
82e09d62853e1d10e6515b01cc7973b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ