DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
07163cad74d84c93f6fc12694ab10df3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
07163cad74d84c93f6fc12694ab10df3_JaffaCakes118
Size
154KB
MD5
07163cad74d84c93f6fc12694ab10df3
SHA1
52ceb5717d059879a272d1814bf6e1735a590de9
SHA256
2976a5d48476e27a2983f46e3a7f5d40aa2b23d44067222fcd9fec850ed1ec6c
SHA512
f55d9cb53ee6a217ea285fde809627c40265c9fa0491a164cef1df0bcb64d0063542ae0d0c1b0c59fa1166106f4c95db905fb3ac70b89b14b75863f5bd81227c
SSDEEP
3072:nSeNaANLWt9erkS6yCOH3TAOWDXDW9VsIr7yP7UW4LIr9:nSqaYLmSUOXTA4eUm
Checks for missing Authenticode signature.
resource |
---|
07163cad74d84c93f6fc12694ab10df3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ