DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b0fcb1771f62157facff2588b42865d6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b0fcb1771f62157facff2588b42865d6_JaffaCakes118
Size
565KB
MD5
b0fcb1771f62157facff2588b42865d6
SHA1
93060a4528d83c2c9eb0ebd4be36677c8fd36373
SHA256
414d38e8c7429369fbd11de23fff92c0c37632c5b1785118a8dcd046fb725355
SHA512
b7e3d965e45852f9fc8a6b8817136e4e0253c53e29df220579b94d2f30a2b211952315cbc53c0d6fe8374ed4365171cc7ec9d7df9b92637dd4addc46f36e7679
SSDEEP
12288:n7Qu2fTS8P0ZL2Eg8wUVQyFk0Z8XjT5QG96OxXmRodPiU:nkueTfK2302oks8fjkOxXio0
Checks for missing Authenticode signature.
resource |
---|
b0fcb1771f62157facff2588b42865d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ