DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f70bcbe704bf4ecea666bb72d3a97c00_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f70bcbe704bf4ecea666bb72d3a97c00_JaffaCakes118
Size
463KB
MD5
f70bcbe704bf4ecea666bb72d3a97c00
SHA1
d1e007b78c975a577b0a7ad79fe30ff759a8741c
SHA256
bff5d925824ede05949d5488a1729d55b5152a6e6ed62dc04f26f2abbabbdcb4
SHA512
daaa93474c091167e3b6d800cab467f9e4ad5d5764ab0391a1c56d53facfe89905f98b0eef85919df07a9a97de8d0e8c6d1177ea71bed57c4ed63dae13e9b5d1
SSDEEP
12288:JD3I+T1hFhQEh9ub/A8z8MmC8ZVa5fnvQ:yO1/GbFY5C865f
Checks for missing Authenticode signature.
resource |
---|
f70bcbe704bf4ecea666bb72d3a97c00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ