DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
86306225942740750854fae5be1cdb84_JaffaCakes118.dll
Resource
win7-20240704-en
Target
86306225942740750854fae5be1cdb84_JaffaCakes118
Size
64KB
MD5
86306225942740750854fae5be1cdb84
SHA1
2abe55456b2f2a0b3b6e16315f848378e5567fc5
SHA256
5979976ae0cbb66386c2adc1b7d42e02a1f1d601ad61e32cb9653be95df64e1f
SHA512
1fca6bd3ed3b4f373a37aa3e94773041b640a24a9f13bb1ed6831cbc5f74cebeaf27415127d1afb433e157e94c872bc6006b41e88d556483a567262c8d66b9ff
SSDEEP
768:heWAZOpak8SLjNnRX7IPTSTl7uTNfvxcIr8tKleljrA01xT1exkgc1r:YQFVOTOYZJDlkf1x5e2g
Checks for missing Authenticode signature.
resource |
---|
86306225942740750854fae5be1cdb84_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ