DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
Static task
static1
Behavioral task
behavioral1
Sample
bab161479d3543272440cb14e0ae90ee_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bab161479d3543272440cb14e0ae90ee_JaffaCakes118
Size
550KB
MD5
bab161479d3543272440cb14e0ae90ee
SHA1
c1a706ee5edbdc4e87da97949f23045d9948641b
SHA256
739bb2f7f522b1483ac33426d2d5495fc28653e8f9b89569e3a55e0ef2fb3777
SHA512
bc7422cbef8388ede6196dd9d123d99e7d5bc4157c74dfdd2473cb22aafbd8740c1910d3d1a864bfbf62691056e32765bc4ef0ba7e30a45ab0537d0f34fe27a1
SSDEEP
12288:JfFr8W3CksEDorb44Z39GeFdgZ1Bx8yahTMDQ8:hiOBDovxLXklx8yKTMM
Checks for missing Authenticode signature.
resource |
---|
bab161479d3543272440cb14e0ae90ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SvchostEntry_W32Time
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ