DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d141d35fca82ef6b5628ba26fe68a916_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d141d35fca82ef6b5628ba26fe68a916_JaffaCakes118
Size
566KB
MD5
d141d35fca82ef6b5628ba26fe68a916
SHA1
46734cf09606721cedb6d44410a02b7ea0120d20
SHA256
65b9fdbceaa6e93f8e85f77037d09d5d9e3b27fc2d7fae9205481e5327493f87
SHA512
babb216054f1fbaa1acfa5110be90f0c47d9336c0a0724bdc210517e0d8dd45cf5c046b225367f406c1ec175ee9dba39b32aad0535f80104bd2cecaa70d4a9f2
SSDEEP
12288:byA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrviKzc8DG6VBwi:v1fqZCHwIr00taCiHR6KHi6
Checks for missing Authenticode signature.
resource |
---|
d141d35fca82ef6b5628ba26fe68a916_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ