DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
12d65d8ab73da8cfb8de45ace707d02a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
12d65d8ab73da8cfb8de45ace707d02a_JaffaCakes118
Size
1.1MB
MD5
12d65d8ab73da8cfb8de45ace707d02a
SHA1
727be846857c7941fe07983d9ad50ca6be81ec65
SHA256
aa347d0f40969018fbad32f856ffffca348db53ba6ca159450ff5776d80268e2
SHA512
bd124af2fcfdb93801b58a65c13b47401c9741b2bfbffaf0e8c19db6b63bf0662544e4b3cad512171d61994a645fa84941eb360a7b423d3306cf6e7a4d5a287e
SSDEEP
24576:jj88c//////nehq4fi18pjWgcQL/liEJvSrNTbHZJjqYCdl:Xhc//////neh5K18pZpvCTtJjqYCd
Checks for missing Authenticode signature.
resource |
---|
12d65d8ab73da8cfb8de45ace707d02a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ