DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d524f0c81020d549c70dcdc9fae929a8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d524f0c81020d549c70dcdc9fae929a8_JaffaCakes118
Size
634KB
MD5
d524f0c81020d549c70dcdc9fae929a8
SHA1
54f39f84bab48d1d3058ef862600effd6b31febb
SHA256
be4685bad1b0ada6a68af530be41198773f45eac6cabbd10b930ac946e782f32
SHA512
c8ab35e412c8b4d865385cafff581cd1885ae73ca6337e6df10c3358134b539a4aa40528b79e1f8d6e8971fbacc003711e40609a2fa4c459591b641162749cd2
SSDEEP
12288:+M0t9FNcxDMmfrLAF8rZIRf2MmsXaGx4R3f5hC/fO79s:2tjNcXnVInva+4Rv5hy
Checks for missing Authenticode signature.
resource |
---|
d524f0c81020d549c70dcdc9fae929a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ