DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0208969de6b1f9bf234bc57c0dde4da0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0208969de6b1f9bf234bc57c0dde4da0_JaffaCakes118
Size
568KB
MD5
0208969de6b1f9bf234bc57c0dde4da0
SHA1
bf66ca306de383a1fa53eb30b5bfa2fc94911a01
SHA256
b50e2c1f3ad0629f956102373fa86706e3c6295b6aff6be6b372823ec8bd02ca
SHA512
1e4cad9971de0daeab15717bf559706cb83ba5c49507e38ed187e11e4f2851a2ff7560212b1156856470eddf17017796f0ee3ccfb42840ef98a7aae206be2847
SSDEEP
12288:PHCqAM6vj721fUXMgf1PuLpHz9vw8Gjk2PylWfo8XXEKnt4VV:PiqTyO6dMLvwosylD8XXEst4V
Checks for missing Authenticode signature.
resource |
---|
0208969de6b1f9bf234bc57c0dde4da0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ