DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
140f8b55e27d8b817689f6280cee2248_JaffaCakes118.dll
Resource
win7-20240903-en
Target
140f8b55e27d8b817689f6280cee2248_JaffaCakes118
Size
607KB
MD5
140f8b55e27d8b817689f6280cee2248
SHA1
253ffc9416d27cd49592c102228eab608b21cd6c
SHA256
9c451c2cdc3e774b7ff3727209a0cc91694d85b63274a113e3878dfd444815b3
SHA512
d2bd690b68712f557e622d86ca1d665aaa92537e955a4fef6733797edcedea7e4c3f93d1ac3d30fa5482ab558ef2bfc706542fb6780c6bd8d9758f34b9102e18
SSDEEP
12288:hpIt9HX65cspWkY5DARyLuaIg3QaohrxS/7Wpn/:hetFXsoB7LGnaohrxSDWpn
Checks for missing Authenticode signature.
resource |
---|
140f8b55e27d8b817689f6280cee2248_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ