DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b0a2305e551a21b8a4d46fee2f991a88_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b0a2305e551a21b8a4d46fee2f991a88_JaffaCakes118
Size
502KB
MD5
b0a2305e551a21b8a4d46fee2f991a88
SHA1
4784513fc0d0c0c76e8b696e306683d9ce078572
SHA256
10fe18e16a74aa581801a24c1c358e71d3b13f1f0532ee2085400adbf11dc2c1
SHA512
3b60936ece60c804a58c7f384a28698aaccfb344635b6af82cd25214513d2d5b5a7abcecd95230a36d8eb8fe873ed5cb710728c2f2845343934f7aaac2836cd0
SSDEEP
6144:h3osi9hpsJt+LQorUzppz64v5Es+mV/N/IYvOO/IpkICfVlWr33KsDAyhX33l6uS:h3JDTzhvqHlckrbXHl69B/6tS
Checks for missing Authenticode signature.
resource |
---|
b0a2305e551a21b8a4d46fee2f991a88_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ