DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bf67252607abe66906826abf0e6be47f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bf67252607abe66906826abf0e6be47f_JaffaCakes118
Size
509KB
MD5
bf67252607abe66906826abf0e6be47f
SHA1
fc5c38dfa276cf17c11721be876471cceebc824d
SHA256
0d7e425be060e3e64e72e64fc73fbeff998c1360aca82a32a18e4a1610076099
SHA512
60fa9d2744fa446df15d00038fb7b179e1e9cd2fd78fd0bd055bf61d898dc01050c73ddbd8917481ee3ed4403dc5e9a07d94a13631a35088ab729ca518926d29
SSDEEP
12288:6wtjXOJ6drKsyvdM6LP1jzJjYPBIPqtu:jjXJdrREdDPppqxtu
Checks for missing Authenticode signature.
resource |
---|
bf67252607abe66906826abf0e6be47f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ