DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fecb339618c23de1d86b4a987039bfdb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fecb339618c23de1d86b4a987039bfdb_JaffaCakes118
Size
611KB
MD5
fecb339618c23de1d86b4a987039bfdb
SHA1
de935585720eeedcc63b3853c63e02112bfbbeaa
SHA256
74dc288a0df492e18bd7280384339dc96f7f10c262237dd00b5ff5acdffcb190
SHA512
2827a9857ea29136f68a00c6846b3cfbd92030bb645a8f816ec07f7e09e623ad1627ca3f512a332e7761a4b6980ea6544a67fafac74643e3e96dbe35db1014cd
SSDEEP
12288:zyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrviUA4sjk+7VBwWHeIBv7pj:31fqZCHwIr00taCiHR6fjT79eIBT
Checks for missing Authenticode signature.
resource |
---|
fecb339618c23de1d86b4a987039bfdb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ