DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d1197322acd1f0298241c96425787d99_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d1197322acd1f0298241c96425787d99_JaffaCakes118
Size
566KB
MD5
d1197322acd1f0298241c96425787d99
SHA1
d09b3b83750dc157e81263c263668d8994e3342b
SHA256
44f50a73f68c9bb6f1916fc3ec0bd0d08f34b6cc43d15a428881f8779d09f7bd
SHA512
244fb5920c363e881a968a319e0cb5188c5739283572bc3977385d03d01fec9bd5ef725bb8eab73c33d3822d8e1f57e1cc81bd01e6c17c8a8db5488e725f469f
SSDEEP
12288:/yA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvioz7BWVBwe:T1fqZCHwIr00taCiHR6oJW
Checks for missing Authenticode signature.
resource |
---|
d1197322acd1f0298241c96425787d99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ