DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b205dc537d07688880b5eded14c9dbaf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b205dc537d07688880b5eded14c9dbaf_JaffaCakes118
Size
674KB
MD5
b205dc537d07688880b5eded14c9dbaf
SHA1
1cf99046a8c047c33da3e6d2173640793f88870c
SHA256
d7e225bb7b6d77b32c8c07ca9e08550475fc7310d500f0909ffb44d90a2f750f
SHA512
b6c2c9c37a9b35de20129a77936f88d89773d9db935acb43ab1b2727d8305088077b7b4fecba77accbc4070a5f29aa45063ac2857984b108b71ef931ca2153d0
SSDEEP
12288:CwO0UFmRHRdZ8VyQ+ONEbTB39tCN24Wl9/XTQwZiw/q+CgQ2tePm:CT0CmtvOEQ3IE24Q/XTQwZjMgQA+
Checks for missing Authenticode signature.
resource |
---|
b205dc537d07688880b5eded14c9dbaf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ