DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0610b5a7c858d4c2175cd94c91670f83_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0610b5a7c858d4c2175cd94c91670f83_JaffaCakes118
Size
686KB
MD5
0610b5a7c858d4c2175cd94c91670f83
SHA1
965fbb5fee5983c85d17667d5e366ac151c713c5
SHA256
a7373f6889a82d763c887d02bf0b4850dbff1674b53fd53477ecb54a7eb97af2
SHA512
681b9d7706b0451e34ed558f9774cf9ce75a6a30c2020611e4dcd2e1a979e4f954292a55c6c6b71da38a7bb031bf71029671f0b6839b14ff4a30a660fdfd5c9f
SSDEEP
12288:idUXYC8MJIdwKRKEZspirlD41dN1hPHBwDjHN++YlbtjOFx2tePm:imoCHJB6KE2ISdVPHBwDTtYlbhOfA+
Checks for missing Authenticode signature.
resource |
---|
0610b5a7c858d4c2175cd94c91670f83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ