DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e25323c45823bfe6cf9500614cdc1691_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e25323c45823bfe6cf9500614cdc1691_JaffaCakes118
Size
439KB
MD5
e25323c45823bfe6cf9500614cdc1691
SHA1
cabf9ccf4394ca54e98e76cae8ed71b6d0a5a5aa
SHA256
70a1de2e2b241a85635e69eef60327b89434572e4853492e52cf61e817434e53
SHA512
c1ef676bcecb8813535856aa88cc7844e8280cb049206dd541ec7968e591714e01226d4146e9860b25a10ba5a07f91266a84c978a9891e45ccbaae1f4e6692b5
SSDEEP
6144:eBpxf38bseXaX3E74s2dUwyZY/7DvYvbvBHFc8k71fhATJpVdIfei0eAWsJvbwEO:IDf38blKX3Er1LXk7FuTs2LeHsJzeZw8
Checks for missing Authenticode signature.
resource |
---|
e25323c45823bfe6cf9500614cdc1691_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ