DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
85818797837860728c728beb8a5f733b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
85818797837860728c728beb8a5f733b_JaffaCakes118
Size
439KB
MD5
85818797837860728c728beb8a5f733b
SHA1
50e64c7c27b4624e5b9bac869d65e6f87aa3e63b
SHA256
a2c481b4c3208bb9417975f1f709dc77a545837607e4fc3dc9031d13b672263a
SHA512
b14a2e5f20bab63ec2334704e7ac4cf852f5c86efcb1217f844a0b9b389f5900ee0711a37d2366236684c73b4af639bd4b67ce08de5eec6fda21dc443c8964df
SSDEEP
6144:+Bpxf38bseXaX3E74s2dUwyZY/7DvYvbvBHFc8k71fhATJpVdIfei0eAWsJvbwYF:oDf38blKX3Er1LXk7FuTs2LeHsJzmusi
Checks for missing Authenticode signature.
resource |
---|
85818797837860728c728beb8a5f733b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ