DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d48cd90776fae8d3c330ed12c54720af_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d48cd90776fae8d3c330ed12c54720af_JaffaCakes118
Size
644KB
MD5
d48cd90776fae8d3c330ed12c54720af
SHA1
d451f67d16a6b18c77adb158547500b3de66eee3
SHA256
c2b914fba8f60e617dfcee666020a9514573a1196993a573d30e3dd58c1c4d21
SHA512
2e8d9d724abb6aa81135e2e949df0f19a445f9f7cff986a69e2afa4ed39a62134cc961079129937f1aab544fb9313d5a90ace649e7e91024a65a97616445c202
SSDEEP
12288:eviGqB8vFJySCXSs9/NAolnnMATPxhOLgZs3eiTv+YkwHeIBv7pj:e6Gw8Ty3XXplnjlhOLgZs3RTvzfeIBT
Checks for missing Authenticode signature.
resource |
---|
d48cd90776fae8d3c330ed12c54720af_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ