DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a95e095d145670a2118180ba7803c9bf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a95e095d145670a2118180ba7803c9bf_JaffaCakes118
Size
40KB
MD5
a95e095d145670a2118180ba7803c9bf
SHA1
3f124dbe75082bd293125eb5605cfb599f49c57b
SHA256
e08bc4b067972800de069f571bcba752959d694a1ab2c9ffc651c519eefbb653
SHA512
9467f4fc894add451c696962cd62d3188319103d434eb134e2e1974a9d655c2d6a06e66b7f84b70f12447950ec58d6ecfd05d9c9f463691088fb42314078fa52
SSDEEP
768:p37Z7EKjN3h5bXK3v6EfHmD5RN2QCrjZIp2gMl+4pc6Ib:p37pZh5byvDHmD5T2QaFIphQ+4pc6Ib
Checks for missing Authenticode signature.
resource |
---|
a95e095d145670a2118180ba7803c9bf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ