DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bf6ffd8fd1cab2434417609c2daf0fab_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bf6ffd8fd1cab2434417609c2daf0fab_JaffaCakes118
Size
885KB
MD5
bf6ffd8fd1cab2434417609c2daf0fab
SHA1
3cbcce0c73dfaafdf39aafd4ce08c3322ecd264a
SHA256
33a692de3bde26aea453d90fb8da6a6fd8eee10435cfc520d60433b232059909
SHA512
409476a39344d33911f01248a814d0e87b5c4b384c211db77e697c581c9ec58e0a9a0e1f0b84afe21b470757c8b49b092686125b259d57f57c5a47f998243877
SSDEEP
12288:W4oZV486F05pl6KcgrN28/TYi/mQ0PGe2RG72R9ULBPD1czXWXTtn5YO:W1vR5pl/HLmpPGe2c72R9UFPGqAO
Checks for missing Authenticode signature.
resource |
---|
bf6ffd8fd1cab2434417609c2daf0fab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE