DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
881161e28d1f6da6dd4c505baa9a4056_JaffaCakes118.dll
Resource
win7-20240704-en
Target
881161e28d1f6da6dd4c505baa9a4056_JaffaCakes118
Size
567KB
MD5
881161e28d1f6da6dd4c505baa9a4056
SHA1
d556aa25f6ce905b1b7ecb5723a8c61b8a3fd44b
SHA256
1704d5d360d92fcd220df3f61442839c1053ab9f597df879e3d5b69a39fe28b5
SHA512
0646392d97de114100f77640c9ceec5aee3731d3039d55e2bf953624aaaaecf66e389a190e78d285d3a3274767cb36fa19426684697d270a01c5a82f7f4d3d39
SSDEEP
12288:CvyKABB/Lr2Uf8q0umNXGL6SCd3Q8mjWUhOGyz9pt4xJ:C6KWtHvDnLuAyUhOGyzPt4
Checks for missing Authenticode signature.
resource |
---|
881161e28d1f6da6dd4c505baa9a4056_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ