DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
eb76c59d69f095c5d4a2ed3cefc7a18e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb76c59d69f095c5d4a2ed3cefc7a18e_JaffaCakes118
Size
562KB
MD5
eb76c59d69f095c5d4a2ed3cefc7a18e
SHA1
a55f40f4bcd876e1b501b048ae90d6f9763f7b8c
SHA256
38f028cc21188a89fad4131f392b5e62c82b9fc4cc8b19406018593fab1bebeb
SHA512
c59690287524cfbde820a97187ca855db1108fb081bec43eabdd14a13192920689fe5dc571561b43360ae025c7ab9cfe5f8c7a28f1f59ece54ecb542d8d45f1c
SSDEEP
12288:kgUV94y09yxH1az44i2JiU5VVNIUOZH5bM4Q1HApi9RYzjQ:4VGy0E04wskIZHG91D9RYzj
Checks for missing Authenticode signature.
resource |
---|
eb76c59d69f095c5d4a2ed3cefc7a18e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ