DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
c8a8cdf73b4eea9dd0c03ea745a280e6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c8a8cdf73b4eea9dd0c03ea745a280e6_JaffaCakes118
Size
1.1MB
MD5
c8a8cdf73b4eea9dd0c03ea745a280e6
SHA1
bc83fd106714530d089692366f1428217d01d4f8
SHA256
18b17d59006b0942872d45510ea232741d10931389ae640a09518a0bf5638f6a
SHA512
dfdf19c623f4144b16a61e5f835e1af6f6a1c5e31731ab8690eef71231343a75fcd1955b60a4a690f54a44d4bd30c8f734468f135bcf0a4b17e80fe877f45228
SSDEEP
24576:Vj88c//////nehq4fi18pjWgcQL/liE9VZJjqYCPl:phc//////neh5K18pZdvJjqYCP
Checks for missing Authenticode signature.
resource |
---|
c8a8cdf73b4eea9dd0c03ea745a280e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ