DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a4d2f16237798c3b24c9c536191d40c8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a4d2f16237798c3b24c9c536191d40c8_JaffaCakes118
Size
612KB
MD5
a4d2f16237798c3b24c9c536191d40c8
SHA1
18da4147449327cf8ff14b3d97115cd1996a664b
SHA256
9b20c8b9d3c1e2fc4f9b7d57d5261a51d7f7de82ae6240e4b58f38b0e6c05617
SHA512
944cfdbc2a6f1b6d17f5d86f30d94362900ba3ada9fc6e5d356d63fb4373521bed0f0b403df0b58888b2012096d9a8559736c4d4bfaf560350cb765f8dda18d0
SSDEEP
12288:pHunA3tW4LnCRy3eD8MtEl0jfwISW+W48C2rtES3Kvzdp:pOOB3g8HGz+zP2JES3Kbd
Checks for missing Authenticode signature.
resource |
---|
a4d2f16237798c3b24c9c536191d40c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ