DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a4b79e63dfaac2881e9c8c94d69599b5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a4b79e63dfaac2881e9c8c94d69599b5_JaffaCakes118
Size
610KB
MD5
a4b79e63dfaac2881e9c8c94d69599b5
SHA1
c6d2c4c57b4d71b77f2ffe6a9d7ccbb5218f4c55
SHA256
2355ab2ee41c7ec83c5dad93c2731793b532c83d833a6891fb1e6c3dabdb0cdc
SHA512
5a5bdd0c6c90d5d195073ba572415cb4c9003c50fafe4ec09d31418a78323d27b4f826c66d882e8d8ee1fd63525bc9cfcfc88c0ad038f4d9e5b1d00de18ae554
SSDEEP
12288:iAFp96Ffv/aX/tOo0O00w8NJidSCnTLtPBYY5/0t7VBwILHeIBv7pj:7Fv6piXQob009qSCXpBY51FjeIBT
Checks for missing Authenticode signature.
resource |
---|
a4b79e63dfaac2881e9c8c94d69599b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ