DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a7a361fa3a7494bbac7346b87dbdeedf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a7a361fa3a7494bbac7346b87dbdeedf_JaffaCakes118
Size
500KB
MD5
a7a361fa3a7494bbac7346b87dbdeedf
SHA1
a40f56ef3e316d603492ec0155c9e0ba70f86445
SHA256
44894c46a004511a92f5ba2c1e8e8eb0b342bc845bae28aae9ed7bda69a1a23a
SHA512
bd4ca306b02045d53cc6fcf52ca30ddc9ac999aa5fe32ca14fca579749d6a19aa4d3b90b875c2446bdc3a2eabbf28a5f19f3bebd5ada0da383037653b0859cc6
SSDEEP
6144:PIbYbZXCAUtEEg25LY1EB3LdI29/iBRYvhAhd1kR5yVvUYmTIawweb04gWayGYk8:kmCAv6k1E01sRkNXmcVgWRGYkvnAVc0
Checks for missing Authenticode signature.
resource |
---|
a7a361fa3a7494bbac7346b87dbdeedf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ