DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dba605220d851853fd9632e7554a2561_JaffaCakes118.dll
Resource
win7-20240704-en
Target
dba605220d851853fd9632e7554a2561_JaffaCakes118
Size
607KB
MD5
dba605220d851853fd9632e7554a2561
SHA1
2c5c61cbe89a168a6a69dcfd44d082907db945f5
SHA256
2fac19c03630098917de7414592946f9dfc470dfba1ea5e5251b140d9d5ed987
SHA512
400dbd2b6c04cf3b8f9015a75cf94a581f1477693e82f3923c91d7be6622e9b5d68904ec0e3045c18493f0a247f7b20ce507234953547710fd37c8b755f07a53
SSDEEP
12288:lpIt9HX65cspWkY5DARyLuaIg3QaoArxQpt/:letFXsoB7LGnaoArxQpt
Checks for missing Authenticode signature.
resource |
---|
dba605220d851853fd9632e7554a2561_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ