DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8383b53e8041267faa5a4c6077183caf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8383b53e8041267faa5a4c6077183caf_JaffaCakes118
Size
607KB
MD5
8383b53e8041267faa5a4c6077183caf
SHA1
0e1421fea0ea83bcdf0dc31cc7b3b6786a44ad46
SHA256
848b71e7cb1c5f4b107eefe10c31cdc6733cea797a39e7759d0d2cf2f5aee55a
SHA512
a21b36783cee1f99467af56526b593435c2ffd91688bda6fad728bf5a163e3c5b2ea094a35d37558502552052cec1721d4315a5f20e0b5d9e5f0c08de1ab9b1b
SSDEEP
12288:apIt9HX65cspWkY5DARyLuaIg3QaoCrdnsrPNLZ0N/:aetFXsoB7LGnaoCrCPNl0N
Checks for missing Authenticode signature.
resource |
---|
8383b53e8041267faa5a4c6077183caf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ