DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fea9760ef10b80b3ff0c05e01a22d7a3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fea9760ef10b80b3ff0c05e01a22d7a3_JaffaCakes118
Size
177KB
MD5
fea9760ef10b80b3ff0c05e01a22d7a3
SHA1
751611235deb9a558d67cfdf02623767bd06240b
SHA256
7f7792b699bc216ff48e273495a06a7df9c062d0e63ca7b2dae009e8736e538c
SHA512
14c10afed18583b69707e1434c2a4f39c6a62689d1983b4c2b905838a5fd0f0c2dc22019e3b44e4330e2f70d95f9c274b589b6a51c193c279c697b548cfd0490
SSDEEP
3072:kY/dHh6ehSYYfHjV+Pi/jwMQjufpcSSlbB4ZRor3PrAPPxHI6LeDft:keoeAHjMi/jwlSfHwB4ZRg3cPxHQt
Checks for missing Authenticode signature.
resource |
---|
fea9760ef10b80b3ff0c05e01a22d7a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE