DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c20bd8d946c9459ac11d372add211779_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c20bd8d946c9459ac11d372add211779_JaffaCakes118
Size
641KB
MD5
c20bd8d946c9459ac11d372add211779
SHA1
d4b694b63c98a2ecc3143c0bada977863df102dd
SHA256
7c9509961b523a5df23a63796ef599b94aa40a6fcfd8669cf53753ba12c2f9f3
SHA512
580d18dd510174563068561b0664fef4d0d924bf658e3dac7dd92e8fc66b08afcdf4fbd391cdcb1172618993144e1f39db2ca80d27e931f33ba7f5cfbd9d9823
SSDEEP
12288:w0Et9YDc5DMWfT44XUDxoyiD02sHtaDVhcE2tePm:YtWDc/EXouPtqh1A+
Checks for missing Authenticode signature.
resource |
---|
c20bd8d946c9459ac11d372add211779_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ