DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
15b20ce74a3c3734e56adfb91f4ef94d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
15b20ce74a3c3734e56adfb91f4ef94d_JaffaCakes118
Size
561KB
MD5
15b20ce74a3c3734e56adfb91f4ef94d
SHA1
9c172c4e72f199bd14829d1713d5c0ceeaa2875b
SHA256
b35e3b04a4b8bdc7bcc3fc7c8230414446ae9a60952fefa3d7b76e5b1f56c346
SHA512
0fc6ea6225f5af6ea8b1fdd755b7d80133a257b413b4bd17cf76de729ab1b02d6f51a402813382324e3e6158597904961b75c4725892a1f1c2f9cfbcc205b95c
SSDEEP
12288:ygUV94y09yxH1az44i2JiU5VVNIUOZH5by2dVslQTj:uVGy0E04wskIZHMEVslQT
Checks for missing Authenticode signature.
resource |
---|
15b20ce74a3c3734e56adfb91f4ef94d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ