DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f9e3178d6ad58a0fabf012a54d827825_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f9e3178d6ad58a0fabf012a54d827825_JaffaCakes118
Size
585KB
MD5
f9e3178d6ad58a0fabf012a54d827825
SHA1
30e7343ddd8967e75d8c3de2118476a39fc5e855
SHA256
789516166bf1864b50fbcee2a99008a05c8a0480c0dec221987373f68038772e
SHA512
5db940452150f26bbc45d45b8fa80b78218edb2df437fbe997f48aa619dfefbe2db915203da02d9aaa087a5a0c2855988b71bedce88e697e326b786bb4c89f35
SSDEEP
12288:DSzwNKVym5oNT4fpJGEI/el4zKC/rcPq+:D8DvoeDLwzKCq
Checks for missing Authenticode signature.
resource |
---|
f9e3178d6ad58a0fabf012a54d827825_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ