DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c0df4995c65a9e0b0007e1b683f9fbbd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c0df4995c65a9e0b0007e1b683f9fbbd_JaffaCakes118
Size
607KB
MD5
c0df4995c65a9e0b0007e1b683f9fbbd
SHA1
649e55538c515b2ceeafe1424029ce5b6ad0870f
SHA256
c557b398846cbcb77a58a6ee90bb592ab5538b6ef73d07a70bc876f3df7603a2
SHA512
967f00beb821a26ff8dd867aa020eaedc6cda400c1f6c667fb8b67b9ca98f75f891f343434fc1decac6524962ad848ad66f83e871db0ef607e5f6158a6874ee0
SSDEEP
12288:dpIt9HX65cspWkY5DARyLuaIg3QaojrRmAPd40I/:detFXsoB7LGnaojrcAF40I
Checks for missing Authenticode signature.
resource |
---|
c0df4995c65a9e0b0007e1b683f9fbbd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ