DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e0b7c1d8af8a9454007eaa554e7b62ba_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0b7c1d8af8a9454007eaa554e7b62ba_JaffaCakes118
Size
640KB
MD5
e0b7c1d8af8a9454007eaa554e7b62ba
SHA1
b36d1676e46759fc2eaadc3635713118ba88e50a
SHA256
44e1f5ccb2164e6596f74f28fd1cfde2391a306dd77a861eee22d4f3daf54bc0
SHA512
071d51e06f67a002bb86e75a1905c28d81cd5b85ca6a7ab407ac2fec6d2d91b7dd5d617e10b21af7a3f056a0ac5928d26df531e540c100d3ee832feec26e691d
SSDEEP
12288:/kdtYzsZDM2fjYiV/UzxoyS7nUmsn7lq+6QNhl2tePm:sdGzs/0kwolUf7lq+6khlA+
Checks for missing Authenticode signature.
resource |
---|
e0b7c1d8af8a9454007eaa554e7b62ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ