DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d149720f6ad162ac90b76dba326857d6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d149720f6ad162ac90b76dba326857d6_JaffaCakes118
Size
610KB
MD5
d149720f6ad162ac90b76dba326857d6
SHA1
06e91bd8e73b4127bf051dcf95a8231c4049c295
SHA256
bad1d1faebef596caa1721b63190168d55655fdfff8d17038b547aa3f8dfa78b
SHA512
0802b6fea8a5cbff604d8030b87e5f5a20bfb2ccaf514244a430342b3f2570fc7fdfec1c3a36062f65a5cd405e1297df29ab61469dfd920902f26218ab7e82d8
SSDEEP
12288:6AFp96Ffv/aX/tOo0O00w8NJidSCnTLtb7Ey1BVjrVBw+HeIBv7pj:DFv6piXQob009qSCXpT1BJrFeIBT
Checks for missing Authenticode signature.
resource |
---|
d149720f6ad162ac90b76dba326857d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ