DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b85502cddf17663702fe0992c56eedab_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b85502cddf17663702fe0992c56eedab_JaffaCakes118
Size
440KB
MD5
b85502cddf17663702fe0992c56eedab
SHA1
653f5bba3b891e6d410627bd18d0026bd884aae9
SHA256
1a0ba51b663633a21288b5d0bdd7238930974801ef829edd145b50a022ad6fcf
SHA512
c3caee6889c5dde843b9516913a742561e129276cf4a5dc3f83c3681cad3468d6bac2ddcf8bc9908b1166d650fe700d9f77c62721d4d7202eee59142c244afef
SSDEEP
12288:H7f38EliX3Er1LHk7FuTk2LeXsJzk1FOB:r3l2Er1KykceSzQE
Checks for missing Authenticode signature.
resource |
---|
b85502cddf17663702fe0992c56eedab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ