DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b77c6602263c98dc4ae717d911a3800b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b77c6602263c98dc4ae717d911a3800b_JaffaCakes118
Size
793KB
MD5
b77c6602263c98dc4ae717d911a3800b
SHA1
320c8632efa792e509317a54c01ac0e3f51c9229
SHA256
90c63541544fe096e168f3336b55492434abd6d03174e6983df4b7fc44532ac7
SHA512
b7583fe6d661e6c51c8cad07324eb6eeb4222b63e69a32b6a7c861d8fd85b9b696604eca3612f5a24f9b8a670a058a64519005402ff991e769ef6f9bca832819
SSDEEP
12288:mtv0EYFWSCJZu51oBcvZHR1LL+Z6biLUWJy1BWcQKHCqmoRIVkCT5e6oj1cU:6MEvSwsZBR5+UiLTiE5oRIVkf6hU
Checks for missing Authenticode signature.
resource |
---|
b77c6602263c98dc4ae717d911a3800b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ