DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
onscowe
Static task
static1
Behavioral task
behavioral1
Sample
baecd4b1d82c4e963874e1ea20a1d5e9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
baecd4b1d82c4e963874e1ea20a1d5e9_JaffaCakes118
Size
92KB
MD5
baecd4b1d82c4e963874e1ea20a1d5e9
SHA1
91119caba0ffe4f343c4a60b43f531b6aa51a7d8
SHA256
9148ac0ad14b6665668b33e2489f6ed1375cb95cf6ef99b6fc3dce66fa8906cc
SHA512
85454356804b03b285238c936fce5d48da88b83f75d0e9252243fdfb714698c47aef00cb3f8ce0a8dec37d078ef35526b0f43efa46891395ab2afcb062a23691
SSDEEP
1536:MDCaWYkXygzXf4Da4T7zOsFBEz4QtfzhlOs+1qk8mEAK7eVOR5uq:Mmj2gbf4DlzO4BwjfzvOsMqkyAKC4Tuq
Checks for missing Authenticode signature.
resource |
---|
baecd4b1d82c4e963874e1ea20a1d5e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
onscowe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE