DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b67c7a0695e2d398937bf9f965db6003_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b67c7a0695e2d398937bf9f965db6003_JaffaCakes118
Size
64KB
MD5
b67c7a0695e2d398937bf9f965db6003
SHA1
7473fe34867b56d4843e95506b5e0db1ad375d3f
SHA256
21612741fd0bee68d2516808a704f15567981037b4d324649a723ef6ca3e61d8
SHA512
6a543bf2a3e7261adcb3990a89443cec78248f0c3465c232452f21f2558516e63a7cf7cc4992acd547a41222263db4c41fa52042d74b982af1d9e7c61f93abf6
SSDEEP
1536:vi6ngLj8mw/BLJqwgsr5ULuQiclrRIg9:viJLj0/BLwKVYunclrRIg
Checks for missing Authenticode signature.
resource |
---|
b67c7a0695e2d398937bf9f965db6003_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ