DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b13f88394e6c639e88ed92d88d0a5af4_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b13f88394e6c639e88ed92d88d0a5af4_JaffaCakes118
Size
561KB
MD5
b13f88394e6c639e88ed92d88d0a5af4
SHA1
2eab2341b7d848bb3e5e9027d3dea15b6e745a5b
SHA256
489333419db25c354059c67f823f2544da0b8f3554975d070f0797b844d66bdb
SHA512
49c1ec9fed611f65a4ec644c381c1ee283e0f001bbf52a28cb91a810f4af659a893c2cfb352183ef0586a45001605bf9fb84cef5c29ac4c5928bd6647115d8c2
SSDEEP
12288:4gUV94y09yxH1az44i2JiU5VVNIUOZH5by2dR41YLL:UVGy0E04wskIZHMER41YL
Checks for missing Authenticode signature.
resource |
---|
b13f88394e6c639e88ed92d88d0a5af4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ