DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
898a7d4b197a17f999074a899cc56207_JaffaCakes118.dll
Resource
win7-20240705-en
Target
898a7d4b197a17f999074a899cc56207_JaffaCakes118
Size
516KB
MD5
898a7d4b197a17f999074a899cc56207
SHA1
4b7145c6e16f246eebbd7db95c883f21a305e352
SHA256
ae0c3d06cc31988407761381d0deb6ada635d0cad0b5786c5f2d64ae6bc475fe
SHA512
139a082136918b574cc10ab8e5fda472bca08e95664ba3fd2b47b411bd49a8d6d74686146aab52ca1f2407760108cb8e8b8a1e134d43009f01e0bc1ec27ac200
SSDEEP
6144:Z3osi9hpsJt+LQorUzppz64v5Es+mV/N/IYvOO/IpkICfVlWr33KsDAyhX33l6u1:53JDTzhvqHlckrbXHl69U76tLy
Checks for missing Authenticode signature.
resource |
---|
898a7d4b197a17f999074a899cc56207_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ