DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
faa6053a3bf36339cc97ef821e24c49f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
faa6053a3bf36339cc97ef821e24c49f_JaffaCakes118
Size
348KB
MD5
faa6053a3bf36339cc97ef821e24c49f
SHA1
17da253f7ab82c3de12b2ae9736c306b7b8383b4
SHA256
a033767ce78627639c122cd9791d5138db718cc2ba8eb9fe1e100cd8654ac085
SHA512
c49c85462f9d5c2a6aaf41a9878faf12161196da608614fe1d596b31472f7faf15e9ae72448cb9200aa66a7d584954d63742051371b374a20a1e03cc57e1fecb
SSDEEP
3072:/FAscX6aMjhkZGNMgaxbVyrxHpYFusGTHN9KGIdwQpFM0WJm/pYOgAjPgNTG5eXU:/FzjhYytz/iTgNnlxbiALHOKcf1
Checks for missing Authenticode signature.
resource |
---|
faa6053a3bf36339cc97ef821e24c49f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ