DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a13bb1e97cf52985707f88fa235a3049_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a13bb1e97cf52985707f88fa235a3049_JaffaCakes118
Size
644KB
MD5
a13bb1e97cf52985707f88fa235a3049
SHA1
8f521ca20341fd4837fc349f7d6a2712769d260c
SHA256
1502c2e2587291fce368bc1babeb8e82a8d2ec83ca4e7b9af037a987974a35a5
SHA512
9def285f888658a15d8fa69c074f5746e071c5adc8d4f2f9bb02cf120e31267dbd77b46d36498947421b4333cd93cb3d961bcebb68ca86420d047f1f9835b835
SSDEEP
12288:eviGqB8vFJySCXSs9/NAolnnMATPxhOLgZs3eN6vktHeIBv7pj:e6Gw8Ty3XXplnjlhOLgZs3CkGeIBT
Checks for missing Authenticode signature.
resource |
---|
a13bb1e97cf52985707f88fa235a3049_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ