DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
87e39cf6450d0f404202d78a2d066508_JaffaCakes118.dll
Resource
win7-20240704-en
Target
87e39cf6450d0f404202d78a2d066508_JaffaCakes118
Size
553KB
MD5
87e39cf6450d0f404202d78a2d066508
SHA1
7d88364de6d3f3394bf21d808002cc34f273ca09
SHA256
5be707b859fa15eada04e8aa55df8e1397ead5ad49fb52f949fb492b0d6df8d2
SHA512
cf0f33a8d8009aa5b11663159b32e691b0e98241ed1711e8363a1fada463199e373e2fb7f141a9731efd9491323871b71428d67e8ec0cfd0c00c694ada210226
SSDEEP
12288:pQB8jWu5YrVCXOYJkB1C1SIaoQzQCB0oEm9stTRs:U+tYFekB1U/aosB0oEXtTRs
Checks for missing Authenticode signature.
resource |
---|
87e39cf6450d0f404202d78a2d066508_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ