Aehgvdkanjemdnat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
FaMbEACdtJAZOzTa
oUniSlxfejpGESHI
start
vAkyzzrtocbjuuuA
Static task
static1
Behavioral task
behavioral1
Sample
dad8f8982bf39faced66ad43f7cbad8d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dad8f8982bf39faced66ad43f7cbad8d_JaffaCakes118
Size
2.3MB
MD5
dad8f8982bf39faced66ad43f7cbad8d
SHA1
56d445238f7754ea828146020c7554c2e425a159
SHA256
9c4fc62caba70e732f4d1265aec5173d4a3155fe28deb87c2436dcd195fa0dd0
SHA512
720e7bc019dd198815c79b7323be1b360a5afd55cb0b533d7195fe0ecf64f34ebfbb1b7a277abc1d3079514e0953bb5d15e131a50db90d8602c8b472e3ff260a
SSDEEP
49152:PFJHxOdrDMpGhpNyGLUx/WINM0GlgkX4yB9TesoGa:ddxOdUp4Py2UxtHGlnoyBR
Checks for missing Authenticode signature.
resource |
---|
dad8f8982bf39faced66ad43f7cbad8d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
Aehgvdkanjemdnat
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
FaMbEACdtJAZOzTa
oUniSlxfejpGESHI
start
vAkyzzrtocbjuuuA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ