DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d4b9e9d0df5438888a03d14c44e4ba41_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d4b9e9d0df5438888a03d14c44e4ba41_JaffaCakes118
Size
596KB
MD5
d4b9e9d0df5438888a03d14c44e4ba41
SHA1
6b4ab692578e7c2c4f22e29884f45d9a4ba2bb6f
SHA256
d584daf6d0fa13a84200c6237fc3cd8341cf60820c34f1c8a14896562286af18
SHA512
60d19655f8ffcab88cfcdd1b59ec1a78fb62088db7e7919e7ed6f7a0dcb1688ebf2b0d16030f67aa21486cea610bb9e8590287b09266ffc6841fd7191e32018a
SSDEEP
12288:4sukklWIbKdQRJbQlbqWya5cs3NQqGhv1dG6ak6ltv:4vkSWh+OlPya59QqGvdGRkM
Checks for missing Authenticode signature.
resource |
---|
d4b9e9d0df5438888a03d14c44e4ba41_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ