DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ranldh
Static task
static1
Behavioral task
behavioral1
Sample
0b7775204c6fcef675f1623fcba7b809_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0b7775204c6fcef675f1623fcba7b809_JaffaCakes118
Size
85KB
MD5
0b7775204c6fcef675f1623fcba7b809
SHA1
498038bd9b61c520fd91f0bde4b956080828e188
SHA256
ca399a64ef03f174f8bf301dbda7d81adfcbdcb487f7e8414e2fa65eccf7fe8d
SHA512
1bf38fa8b2f8d1585c32e7c0e01448d7aaca25c5cd244e770d1e29854c1fa871cd9bb8a02032ac10a37bc692115be4c77079c73612ff9c8c9e8040539a870749
SSDEEP
1536:pglo1l+TlCYkoBgzED6WrGVetQhclc30H4VF6CfKTg4NKx:qo1Ul8zEDkeuhOckH4V8CfKTg4Nu
Checks for missing Authenticode signature.
resource |
---|
0b7775204c6fcef675f1623fcba7b809_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ranldh
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE