DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bdbaa7515293ed76e6d6d503628165f9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bdbaa7515293ed76e6d6d503628165f9_JaffaCakes118
Size
569KB
MD5
bdbaa7515293ed76e6d6d503628165f9
SHA1
3d6be4e4183eb3ff3be55e6e551cab2cf20cb65e
SHA256
953f3025b5947eede890036f4b1a8b9efe6ae64eaf52d46c13f46129eec07470
SHA512
1b2054a4915694d5cb469af387a470cdb906cf6eb3b44c694c9d2b211987575f4c5884668208b3a541e6f497f6f3d1e0c3056c57f9e847f31b3a150ee6f87393
SSDEEP
12288:DPfIdjsBCOASFWwPKrEWhK279nULxOSKyDIljo63BsMscoHQox:rIFmI6KrfKAZULxLKy363BIcoHB
Checks for missing Authenticode signature.
resource |
---|
bdbaa7515293ed76e6d6d503628165f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ