DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fd5a0845d09277592d9154724750c9d4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fd5a0845d09277592d9154724750c9d4_JaffaCakes118
Size
607KB
MD5
fd5a0845d09277592d9154724750c9d4
SHA1
81262479f847e3d9f69e2b6de1e7ef94270eda99
SHA256
43013abb7ddc69776fe389fb735274d18f86b2a166f746856fad478014defb72
SHA512
9d834c3e14a68c48e82ff963ad09384a573bf8496aa452c7e7d7616558be7519c4de788edfc983d88a90557c084b3af64be1da441331565c98c56eab173012a7
SSDEEP
12288:NpIt9HX65cspWkY5DARyLuaIg3QaoKrxG7l0ga/:NetFXsoB7LGnaoKrxG7l0ga
Checks for missing Authenticode signature.
resource |
---|
fd5a0845d09277592d9154724750c9d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ