DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d712c2872a7130cfd2280d0d8dca3bc1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d712c2872a7130cfd2280d0d8dca3bc1_JaffaCakes118
Size
635KB
MD5
d712c2872a7130cfd2280d0d8dca3bc1
SHA1
8d6a479b16a75366f70277e44aed2c72a32ba59e
SHA256
60c16a70e63a430b15dd7ec70dc9e72d8a42d707d2fef69ddeee3a48d9c4f7f2
SHA512
cbe00dd485bf3e9d5b52f6b0c016f65d271f461a867d879c4124e8a3695d4455c8ae600cf5168b3d5c5e24e8a81bd30d9fa9881bada37e61e0ab5e9ff80e1fcb
SSDEEP
12288:gM0t9FNcxDMmfrLAF8rZIRf2MmsXaDZ3whq/fO79s:AtjNcXnVInvadAhq
Checks for missing Authenticode signature.
resource |
---|
d712c2872a7130cfd2280d0d8dca3bc1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ