DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb29c4d98dc9f613c98adb5943d6af71_JaffaCakes118.dll
Resource
win7-20240704-en
Target
eb29c4d98dc9f613c98adb5943d6af71_JaffaCakes118
Size
567KB
MD5
eb29c4d98dc9f613c98adb5943d6af71
SHA1
ed8a78050435aae27ad826ecb3d8694793b7a4cb
SHA256
834b7eea5d6948ae39436dbbacd0a73e8400a614a79d4a5ba00a172ea72b4dcd
SHA512
6f503e64c0e5703d02bb958904401d262e883f4be0435bade8f370dce911e90cc6703c538afb298cf5c67eb0c1a4f34a8d906614f928962d348beb3d391d1d1d
SSDEEP
12288:G7Qu2fTS8P0ZL2Eg8wUVQyFk0Z8XjT5QG9R55Aw/sdPi/:GkueTfK2302oks8fjfjAus0
Checks for missing Authenticode signature.
resource |
---|
eb29c4d98dc9f613c98adb5943d6af71_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ