DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dbf317eda108b90053692a6d7f779512_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dbf317eda108b90053692a6d7f779512_JaffaCakes118
Size
566KB
MD5
dbf317eda108b90053692a6d7f779512
SHA1
46192dfbe6499726fbbe34d096c125f614248a91
SHA256
4c6e9d9bf3ab56b73eacd42f5625026170a920ad9fe901bc2b0fb78dd9eb9ff6
SHA512
343c344d03cb335f26a89d3e58d44d59b66039eeaba54586b597dc08234e0717a095ee72dcbe374f56ce2b1d08d86d8cf655ae21c38dffceeed892d15e09543f
SSDEEP
12288:LyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrvizzKLrBVBwY:/1fqZCHwIr00taCiHR6z+vB
Checks for missing Authenticode signature.
resource |
---|
dbf317eda108b90053692a6d7f779512_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ