DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
decf607159edba796653d5ef53c322cf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
decf607159edba796653d5ef53c322cf_JaffaCakes118
Size
585KB
MD5
decf607159edba796653d5ef53c322cf
SHA1
16da2fdaccb1a95211afd25ed2d2e3aa570cecb1
SHA256
143a42b5a6fb467a19b5f656a4e5e5ec560e67d902d3189836a937887909099a
SHA512
8203705e1cdbb695aa8b1f6150c462b924ab59c17b1ce1c86802d5561019b086b555ed0275ca476356dd33b3a89c3a16d9958af141705d1f5f9e6199d662b477
SSDEEP
12288:TvB1Gkepkc6e23FS5IN3zEniKNznr5G44pE914YBgQ:N8pLiFS5INARttG44O13
Checks for missing Authenticode signature.
resource |
---|
decf607159edba796653d5ef53c322cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ