DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
dfabdad099cccc6eb248b60b95dddb6e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dfabdad099cccc6eb248b60b95dddb6e_JaffaCakes118
Size
681KB
MD5
dfabdad099cccc6eb248b60b95dddb6e
SHA1
a586e3745f421348672331d086b699470cbf7b9a
SHA256
599e450f790110963c05658a80ed60eb4413f802c271f7685e39f55349fdc566
SHA512
3cadc5531989dacc585eee138c977ddc8f052b9b5804366a258d17efb1e0e7b964ac56084dd019889c916091aeecf650a050f7a0be5f4c0dbfeeabfc9b6db92f
SSDEEP
12288:kd8XIy8eDudnnJHjxF/Tt0HARqd1hPHJcRG8zATzznYGvU7OFKpV/fO79s:kuYyRD0JHjBHqVPHJcRG8zAXznYGs7Oi
Checks for missing Authenticode signature.
resource |
---|
dfabdad099cccc6eb248b60b95dddb6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ