DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad59c01e899cf7f9c7db6afc6163773e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ad59c01e899cf7f9c7db6afc6163773e_JaffaCakes118
Size
560KB
MD5
ad59c01e899cf7f9c7db6afc6163773e
SHA1
87dfd31e639f718a8452e68509ad65a712a32131
SHA256
d4fb90dbf4dd0694fa35583485a78f95b9433bf5349bde67b09a30c65be74062
SHA512
70e2f49ac8d69b7332b24ba716b2c94eaa317ad507c8c33696f4a76c80c26ae485abe650260e5675849cf52da320d892763803b5248ae490c2be892f5654cd73
SSDEEP
12288:qgUV94y09yxH1az44i2JiU5VVNIUOZH5by2dQvaTo:mVGy0E04wskIZHMEQvaT
Checks for missing Authenticode signature.
resource |
---|
ad59c01e899cf7f9c7db6afc6163773e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ