DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c84c230b7cfac47fb947dd16472355e2_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c84c230b7cfac47fb947dd16472355e2_JaffaCakes118
Size
830KB
MD5
c84c230b7cfac47fb947dd16472355e2
SHA1
eb12d4b11a73a999e3242184ce207d9ac2aa5f79
SHA256
d856af28ec8d207a26a58fa890510de25f446fcfcaa8b1b700c1696618764945
SHA512
6ca49ebef19242c4612839cdd8559fdf85ddea7d12649b68101ffef777a6c9c238f2968b8f31bb4fe76802203cb4e3d196c9d756fbfd1b1f17e22f63d451de25
SSDEEP
24576:d6cK+32a7zPdcx/BMYAGJHv1HVeCLAVbrT49bG9v:d6593UT4hk
Checks for missing Authenticode signature.
resource |
---|
c84c230b7cfac47fb947dd16472355e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ