DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ae1a49b9f499e69e6232dc8f8027d588_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ae1a49b9f499e69e6232dc8f8027d588_JaffaCakes118
Size
634KB
MD5
ae1a49b9f499e69e6232dc8f8027d588
SHA1
52e72e618ec7a471c2bb606bbf8201d5e6391eee
SHA256
01d2b68e2242d59741015019b67d8b26d382e826f99270d49c5c54b3fe6e8257
SHA512
ddffab9c42a7273db97c4c4fb7e5311d58b1f38f1395f97c86342ee2861489b1869166af89fd32c6bd7810ad1cbd7b0cb5984f1037a66c1182df6faf1d4d07c1
SSDEEP
12288:PUdtFdMxDsGf7r63P8b5oxP7SMWsXKNwiYQREhP/fO79s:MdTdM3X24oJlfKOiYQihP
Checks for missing Authenticode signature.
resource |
---|
ae1a49b9f499e69e6232dc8f8027d588_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ