DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0593c8fb1b557480169978115eb71739_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0593c8fb1b557480169978115eb71739_JaffaCakes118
Size
154KB
MD5
0593c8fb1b557480169978115eb71739
SHA1
03e10be4da7f294d763415bfab1b0824093b402c
SHA256
d06c6fec900d7cf032860f93bdca4d5bb44c445a7d552a270ef7e55ce685a08b
SHA512
6a2f4571326996cceede966fc684cce475ecfdd46fa556e77213608db99a11d06f76e338f22980f8ff26fd9b5cfddadf5310e74d521f943d5f83689ace336875
SSDEEP
3072:nSeNaANLWt9erkS6yCOH3TAOWDXDW9VsI87yP7UW4LIr9:nSqaYLmSUOXTA4zUm
Checks for missing Authenticode signature.
resource |
---|
0593c8fb1b557480169978115eb71739_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ