DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
063761af45e91eeb0cf6b540a68a3d15_JaffaCakes118.dll
Resource
win7-20240903-en
Target
063761af45e91eeb0cf6b540a68a3d15_JaffaCakes118
Size
709KB
MD5
063761af45e91eeb0cf6b540a68a3d15
SHA1
752e18b02b27fd8949eb34717ff75fd9240c151e
SHA256
7e3ed6401da9ccd9013df5a969c7de36bb2c89ec2ecc2c6b57f4e6afe5f72555
SHA512
4413c3b1c68946da4b1c080f0c8cf6f0a95ca2c1e80dbec4bedadcab957cd851a219faeaa9ed63cf309a6d2605b4cde446d50cd443814eb163a7000271b049d8
SSDEEP
12288:VQVH8DGF6m25iuZJNIvNLjZVLY26e2HUQGJ+1hWcQs04bvEFJuPP6ojHeIBv7pj:WcDpmU34xdh6TUPukgAJun6qeIBT
Checks for missing Authenticode signature.
resource |
---|
063761af45e91eeb0cf6b540a68a3d15_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ