DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
pidvccf
Static task
static1
Behavioral task
behavioral1
Sample
0667358f92aa1489b70adc7934007027_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0667358f92aa1489b70adc7934007027_JaffaCakes118
Size
92KB
MD5
0667358f92aa1489b70adc7934007027
SHA1
3c850618576f853245d47b54da97f14f36297fd3
SHA256
fb901740e9487415718eb28042c0fe77a4f7e37e95241ccb6e4ebd3a0626e996
SHA512
1023a6c17b25771749b8e693e66d2493ed366ac07e9351f7da569012c2296863e10cd740ec2f12f46de41562db5e0c80f7310eda3ccb976f76ecdc58968232ac
SSDEEP
1536:kq0m7ATBXS670iPRO6J5lqu9cZCpN/ikWELCCBsrUBar1kNNYGZBx7sxrlv6eZlb:kFmmS67lnJ5UuHpN/rBOCBsIIpkNNYGP
Checks for missing Authenticode signature.
resource |
---|
0667358f92aa1489b70adc7934007027_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
pidvccf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE