DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadFunc
LoadLib
Unload
Update
Static task
static1
Behavioral task
behavioral1
Sample
027b5b2b580ec5c3a779095ece21a0ce_JaffaCakes118.dll
Resource
win7-20240903-en
Target
027b5b2b580ec5c3a779095ece21a0ce_JaffaCakes118
Size
155KB
MD5
027b5b2b580ec5c3a779095ece21a0ce
SHA1
ac92cc21fd25db9943c52fca00e95f78b8e003bf
SHA256
a7776fff9c17a0e38982b820e669155dbad0114991d1ebfdc31f1d0e8c75d62b
SHA512
ce175e68dc28ceff63e6bfd9c76d512b7f088e6470c90d0976e7d3260aab32edba16b4894a2c391897a16b0ddb5df911064965d48c5e5e6b3247167b61c8198b
SSDEEP
3072:8KapEBwCqr4qmWGvFtfP4cMXV1nZIYQgxMxgWUhwNTW:8KEEyxr4IOtfesgJu
Checks for missing Authenticode signature.
resource |
---|
027b5b2b580ec5c3a779095ece21a0ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LoadFunc
LoadLib
Unload
Update
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ