DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d3318333410eb2c468349c32dfb5f09d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d3318333410eb2c468349c32dfb5f09d_JaffaCakes118
Size
599KB
MD5
d3318333410eb2c468349c32dfb5f09d
SHA1
3f232770bccaebb9fb44eb1872a5578fb2ad6358
SHA256
93659696605159ac29496b1d50ffff6c748bbd751f7f5bdea4f451470380e251
SHA512
c17e3697206532d6e96bd4629c2dc0367abc41029613ca43b99072964f04edf697b4a3897961e61a9ee3f719f57056f45eb96aa636e81dbfa08217517788b95e
SSDEEP
12288:dviGqB8vFJySCXSs9/NAolnnMATPxhOLgErQp7jqkH:d6Gw8Ty3XXplnjlhOLgEUhu
Checks for missing Authenticode signature.
resource |
---|
d3318333410eb2c468349c32dfb5f09d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ