DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b79f5b73b49618542bba1fcaced91187_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b79f5b73b49618542bba1fcaced91187_JaffaCakes118
Size
566KB
MD5
b79f5b73b49618542bba1fcaced91187
SHA1
32ed3f594f1236ea9f1f23dfc4df26953c2a8ce3
SHA256
323bb20da5659b352b529d996a951b062738bb1dfaca3d6e01121df5bb1dddb9
SHA512
5f33477ace2158875bd080a150127faef47164141d1035c4fc4a18c066aeba23cb1e2389138dd789ad313e46d87e9f7c5ad70379a640cadb20ccd1e75016427d
SSDEEP
12288:RyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrviBzRGflpZVBwk:R1fqZCHwIr00taCiHR6BtGPZ
Checks for missing Authenticode signature.
resource |
---|
b79f5b73b49618542bba1fcaced91187_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ