DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fe26220f74d3b7af7c19ce6cc9fdf32a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fe26220f74d3b7af7c19ce6cc9fdf32a_JaffaCakes118
Size
444KB
MD5
fe26220f74d3b7af7c19ce6cc9fdf32a
SHA1
256c7ac56f5827aadae1b88f381eb6fe980444ac
SHA256
11050495b196f43b47c794c05bd191aa43ba2aaa9369899662a6d3c93ebaebf9
SHA512
f6806c80f1f1f8591f062d37313c69d135bc5c096b7920c855124c8cf60b9720679d1800322e5d74c5309b67cc3288896a08aab58405a0ac77d666f0d8671742
SSDEEP
6144:083ALVuLn9ZdD2olA6KRMVZ/IjzYvtYHnjGIeHilkJ4qDtakHaP/5Oc6hgyu2peE:Z3ALVaZt2o6O92jVeHzasaL/cTgyu3S
Checks for missing Authenticode signature.
resource |
---|
fe26220f74d3b7af7c19ce6cc9fdf32a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ