DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6844156980012c5c7bc22eb246a16c3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6844156980012c5c7bc22eb246a16c3_JaffaCakes118
Size
640KB
MD5
f6844156980012c5c7bc22eb246a16c3
SHA1
0323a1abf336019b43b565920f3cface79df61b6
SHA256
38bd88c87c0a3a12ab79d8eb5ef2bf6d40138eef2ac366ea630173b98efe2ddb
SHA512
4a0ae7345138d747a59f9df64bd31fefb262d7f7d0c96cf991df4aff14b27a42d537762af82dc399e968b40aaa324fb8b5a4fd1ab0bab2d767faeaff27dabb33
SSDEEP
12288:G0Et9YDc5DMWfT44XUDxoyiD02sHtafrKhcD2tePm:WtWDc/EXouPtyOhmA+
Checks for missing Authenticode signature.
resource |
---|
f6844156980012c5c7bc22eb246a16c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ