DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad8b7f273e0916478907edc40489c7f6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ad8b7f273e0916478907edc40489c7f6_JaffaCakes118
Size
668KB
MD5
ad8b7f273e0916478907edc40489c7f6
SHA1
9eaf13197c4722392aaa810927743b1c9d8563d9
SHA256
1861d54e9553e32ec0ca414750178c06a31ee385f1d88764c96cc819755708e1
SHA512
b874136857d88caeceac07b4235d8d7dfe8e1f0696510e4ee47aa76ee35f915f472a3fde4abe600a4b56b07f4d3bc128db7c0d252d4c25e936ea7f1138bbdb56
SSDEEP
12288:qIukUn4HHRaIsGyLmOtEAtk/1+JsHgWl9/XHYmBXSYnA5gO/fO79s:qrkM4nAJDL/yLHgw/XHYmBiYncgG
Checks for missing Authenticode signature.
resource |
---|
ad8b7f273e0916478907edc40489c7f6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ