DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
test
Static task
static1
Behavioral task
behavioral1
Sample
b5d600751136bad08a114e6c88689fe8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b5d600751136bad08a114e6c88689fe8_JaffaCakes118
Size
168KB
MD5
b5d600751136bad08a114e6c88689fe8
SHA1
a068ba1974de981cb61aaf55ec65e0e8a4b3e4e8
SHA256
85bce1adb49b15f2de792c8b0a93478fd21af057c171cb9356e217fc1ed4d86a
SHA512
d760d4deb882284ec89466a31aad4f87b403debede77a68ebf5ee9874893af8390e4a7c0cedd465d4ea054d3fd9bbc22f28aa60fa4e0861929227a8ebf3e3b05
SSDEEP
3072:jeW4hX65H5nh1tEuJAkVZiNX+Il1UCFULHOV9rNhme11z6:Sn8HFttiH3UyvpYSz
Checks for missing Authenticode signature.
resource |
---|
b5d600751136bad08a114e6c88689fe8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
test
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ