DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aeca5a173cc8a75e3f1b9088620eb8f2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aeca5a173cc8a75e3f1b9088620eb8f2_JaffaCakes118
Size
71KB
MD5
aeca5a173cc8a75e3f1b9088620eb8f2
SHA1
f2b68817f9dd89e3c64007f524247ad711aa3de7
SHA256
c41923320294f67c9f7efd214b8d0358a7771f4f991b6d914133e007ffc416b3
SHA512
ff5cf54027a704a0dce3d2c1b486b6afd5ce9aa66f65ab8e423ecd69927b2e6af5be9b35bf047821edd5be8440eade91842dad15189f1a28e0f7dcba23ac8a52
SSDEEP
1536:NZbXGFaHT0kF0n+IfExnhidLfXd7uye6smJyQrH6pIQ43WfqP5jI/:DZHXjIfShiVvRuxHQoIQRfqRj
Checks for missing Authenticode signature.
resource |
---|
aeca5a173cc8a75e3f1b9088620eb8f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE