DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c86e00b0938afe9fdceb91cb9b0b0138_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c86e00b0938afe9fdceb91cb9b0b0138_JaffaCakes118
Size
644KB
MD5
c86e00b0938afe9fdceb91cb9b0b0138
SHA1
43c306915648d0e5966114ada4bb9ddf49d6d2e0
SHA256
d8a4f7b71cbc7a59a1b2e5f30538f1c2cb0cded7f58078b213c00639d5aad42d
SHA512
94cb830fd7549c9e3e3d0fb4c65e5cfe922ea484ab315ab3a0b51dae31e96fbc32ea07154865f95356044e1e890a3e0a939efc028eb6f23799a87928803777c2
SSDEEP
12288:+viGqB8vFJySCXSs9/NAolnnMATPxhOLgRs3eICtrvTkwRHeIBv7pj:+6Gw8Ty3XXplnjlhOLgRs3TCxLN1eIBT
Checks for missing Authenticode signature.
resource |
---|
c86e00b0938afe9fdceb91cb9b0b0138_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ