DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
c895c336279b64d4634bccc95cc688f7_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c895c336279b64d4634bccc95cc688f7_JaffaCakes118
Size
565KB
MD5
c895c336279b64d4634bccc95cc688f7
SHA1
3f55abe0738d2a0b673dbb074c0efc5b57fe3e33
SHA256
74b0ba5a3572c6516ef8302fdc46badf0b29d54b5030a27c44d76fc0df7269c0
SHA512
439712a3afb0d88e925fe565d0896807cb7f67bc20fab03b2b046c93d1b0fe3564bac36f175627fc5b39cb1a4e252d062168ed3004a09ad2dcb54a42354c2d90
SSDEEP
12288:YyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGdaMqInVBwx:G1fqZCHwIr00taCiHphaMPn
Checks for missing Authenticode signature.
resource |
---|
c895c336279b64d4634bccc95cc688f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ