DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d2868e38fef0a30876cc96e15aab8c91_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d2868e38fef0a30876cc96e15aab8c91_JaffaCakes118
Size
735KB
MD5
d2868e38fef0a30876cc96e15aab8c91
SHA1
018f1fb6e62d39ca579719bbb12a2cddb421b614
SHA256
49409e953211a9855f5fd995dd298ec9429be54dd7417dbf3baeb8acd9cf7f77
SHA512
1c85b08b3b4a241b9eb13e4a59d4fe65e428c56249ad3142af47c378b73750233d800fe448f2362f307347ff4ead243d771cddd4f749f39ed946577015b75b46
SSDEEP
12288:/G6lx1NmnAQfhzVqoLTrUdSiMAR96N3C+AsHW7o8Fe+U8o3LNwv9VYK/fO79s:Bl3Na9tVqo7t8R96hHAte8o3RsVp
Checks for missing Authenticode signature.
resource |
---|
d2868e38fef0a30876cc96e15aab8c91_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ