DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
fae27e54b2d03eef4eceb3cd8fd0de6a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fae27e54b2d03eef4eceb3cd8fd0de6a_JaffaCakes118
Size
166KB
MD5
fae27e54b2d03eef4eceb3cd8fd0de6a
SHA1
d615880ca0f2d5fa07e867ae46b3e8077a20d9dd
SHA256
d9a04de2ee579b530f10a149b584bfd6cb5593b48fd1f4f9b9d6b14ce99a9843
SHA512
438a3a60e7516bd2639f525c73ef3b39177777ca6d324650872698eab7c2cf27872f24ec88fd2875293ebccbf828d4b627866cd2e7869d6c934903d58a8b96d0
SSDEEP
3072:TXNUl11KZRzYRULv4bx5nN1LkXRj2HsXlXlfeZ+5Fh2VT9cvgJ9YsbXJ3WR:TXtXCULvAvLIj2MV8agcvg9lXJmR
Checks for missing Authenticode signature.
resource |
---|
fae27e54b2d03eef4eceb3cd8fd0de6a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE