DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
de4847ab2eed5e0840bba4be404bb65d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de4847ab2eed5e0840bba4be404bb65d_JaffaCakes118
Size
312KB
MD5
de4847ab2eed5e0840bba4be404bb65d
SHA1
4e20431485a18e754678e5e8dfcb9ea681e0a41b
SHA256
15df97cfe2bce8b0ee33580408c3545fb007827083db8da801d9f551704b04c7
SHA512
871ca12c4b54240173a6c61c16eae3313f075d703884c202be56fa13f8de2d30f55a755bb985e693cc9a23b80d4a5f029f037224de4a5b2805b79e81ecb45c7b
SSDEEP
6144:DHWsRRuQmCiSiUM5ZXCwuu9BgrzoZDE5ZdB+pRmzkH/M6XGs0yrKaA:SXQCPuu9czoEZ6p0IH8sJA
Checks for missing Authenticode signature.
resource |
---|
de4847ab2eed5e0840bba4be404bb65d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ