DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f6c916c9b72d38263a1b598154090c5f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6c916c9b72d38263a1b598154090c5f_JaffaCakes118
Size
610KB
MD5
f6c916c9b72d38263a1b598154090c5f
SHA1
d67c1de16f50610bed5660be2b990d5b0bfbf469
SHA256
113f4e912eb6250ecf118107a75a3fc5fe55885916ea9fb40d03bb280dda9278
SHA512
8eddb1a38edb5dfef246e4073e41232e7a3dfc23457e7c59b547fb7d364a169b56a8ea38297202e4cb01bdf9f90010326c9fa5a4efa81a7f8ae9846b0865eb90
SSDEEP
12288:RyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdLOGSPy1xBgVBwxHeIBv7pj:R1fqZCHwIr00taCiHpV1TgWeIBT
Checks for missing Authenticode signature.
resource |
---|
f6c916c9b72d38263a1b598154090c5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ