DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a1fdfd96d61ae1573f338ee7879c5ec5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a1fdfd96d61ae1573f338ee7879c5ec5_JaffaCakes118
Size
635KB
MD5
a1fdfd96d61ae1573f338ee7879c5ec5
SHA1
26437c8eaaaadadbbf0d9943d6f49c606b4eb520
SHA256
a7658f9e62041a136481d9ca2d09c47bf931c0a398d06ca3d08b859a0d1d5233
SHA512
4e84c4f608e27e27762df57c62812fc8b638c2f7784cef5a9f6e96dcfd902d38e86349dad2928516c5ce91eac74e923d0e25abcf92870697b9413e236dc5da7c
SSDEEP
12288:6M0t9FNcxDMmfrLAF8rZIRf2MmsX4eDKosD7Ihw/fO79s:itjNcXnVInv4eGosDchI
Checks for missing Authenticode signature.
resource |
---|
a1fdfd96d61ae1573f338ee7879c5ec5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ