DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8db92cdc71eb3bb38b0335566a27141a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8db92cdc71eb3bb38b0335566a27141a_JaffaCakes118
Size
438KB
MD5
8db92cdc71eb3bb38b0335566a27141a
SHA1
f53756097fcc192bdccbd65828fbec246f94032a
SHA256
9602f655345b47a4411de3253f70369f9dd6876e3c2f9c052f6a19ced49d446e
SHA512
2c413110e204137b89fac0ae2714ae5ff794a11b83839f8c841e80fae4d1d8c3d69344a68e11fbcef07ba4140c90f0d9430423e881f6b9cc53105ed52e812827
SSDEEP
6144:+Z+3xd40imiligpQMTRPmK/9PmYvieYdnSjLJGIIZVdhycFhKfdg1ZL8NK4WJ+++:Vxd40XilL5VBLJd43FbL8YQ+oT
Checks for missing Authenticode signature.
resource |
---|
8db92cdc71eb3bb38b0335566a27141a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ