DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
88279310548b4ccebf5304fb6c01dfad_JaffaCakes118.dll
Resource
win7-20240729-en
Target
88279310548b4ccebf5304fb6c01dfad_JaffaCakes118
Size
607KB
MD5
88279310548b4ccebf5304fb6c01dfad
SHA1
5deb3a6c6c02d0a73696468e39b3563d1af7e817
SHA256
345f03f54298d5c847534a860444fc1021a1dcc893176d3a41a9f99c078eb6bd
SHA512
884e80957c206ee447874dc459902f47b4d6d789888b7128f9969fe7f6e502b24772f66f2c56affce95e2f88f9fd707acb70dd2aa1020f6d811684e600178115
SSDEEP
12288:FpIt9HX65cspWkY5DARyLuaIg3QaourRmLv0V/:FetFXsoB7LGnaourcLv0V
Checks for missing Authenticode signature.
resource |
---|
88279310548b4ccebf5304fb6c01dfad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ