DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a59e9d97d6bcec8b93c897e727f4a6e3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a59e9d97d6bcec8b93c897e727f4a6e3_JaffaCakes118
Size
68KB
MD5
a59e9d97d6bcec8b93c897e727f4a6e3
SHA1
059115128b6af03d0af06ecdc0239857e49b4d32
SHA256
761c545558d6b25673a3e00d7bc40745521a6019c2ad279e8fe672731b8d7bc3
SHA512
64bd17b8037b4fe1b8df51ab38e9278a83d78c36180706aa46c869ff777d5468cebbb5ce7995002206416c2a20472d101a25dc11d5c1c87390f1f9ba60998205
SSDEEP
768:bue2R4N/p1gglFu90AeQJFx6g2VCaZZqJrbY6E9UrIT0JEdBtZu+Lmt0r+R:b4R4NcgPat5JT6FcaGrbYBz0JcIMn
Checks for missing Authenticode signature.
resource |
---|
a59e9d97d6bcec8b93c897e727f4a6e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ