DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b72f67a66fdc392ddcf564de5c59e185_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b72f67a66fdc392ddcf564de5c59e185_JaffaCakes118
Size
635KB
MD5
b72f67a66fdc392ddcf564de5c59e185
SHA1
086b45e2474eead9c123f4f7f9a732f1dea2a791
SHA256
c8bd3337491d82d630379558daedd1fc6188e04584916bf1344d98432d1404e2
SHA512
2e7066949f49f9c08a79b9f64795a7e03046f13a7d77916f4b871a0bc93b935ecb029d820f7c250c68426936a13908f73262c7d15d9bc273f24f93ddf9c7397e
SSDEEP
12288:CM0t9FNcxDMmfrLAF8rZIRf2MmsX4ekbTlG/mhm/fO79s:atjNcXnVInv4eqTl5hO
Checks for missing Authenticode signature.
resource |
---|
b72f67a66fdc392ddcf564de5c59e185_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ