DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
13099c1d0ab51ecc6f5fc8ff7ac7be94_JaffaCakes118.dll
Resource
win7-20240903-en
Target
13099c1d0ab51ecc6f5fc8ff7ac7be94_JaffaCakes118
Size
686KB
MD5
13099c1d0ab51ecc6f5fc8ff7ac7be94
SHA1
51ac17340020be9a7a6637f5fb7efda42d447533
SHA256
af224ebcc3b0deedb9d717708ae31dd7d14cb24857ee8163e1f452de6eb635c0
SHA512
9eb1cfbe40c0c2ef8e49d06b5e932fee5e8c254d6a65802b2b42104c9c12ded1e369946fbbaa01ae1bffcb27feedab2ac1ebacbc4dfbf02472a35153d215428e
SSDEEP
12288:rN6OmNvblOiCJR2OXJaf6Xl0CEqJ58qh0D57lm5ZgUTK6:56PvblO62aYyPU5bytYK6
Checks for missing Authenticode signature.
resource |
---|
13099c1d0ab51ecc6f5fc8ff7ac7be94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE