DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
2793b77413e557beef93329e77a234f3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2793b77413e557beef93329e77a234f3_JaffaCakes118
Size
1.1MB
MD5
2793b77413e557beef93329e77a234f3
SHA1
f6e39d9a5b4f4745c720f950c6ec41c852abd966
SHA256
b7fc8cf675abe5bfc0753be1bafa24a3bc28a6eb951aa41c2bab23a12fa06f03
SHA512
cbf6f13a29deabc59371ee934200f3d157660d3d69632c221ff68cad998c989e7bd2dd9ed6db3b373e0f2adec71ab47c93e419bb2cd0110bc361ddfaf85f1734
SSDEEP
24576:Hj88c//////nehq4fi18pjWgcQL/liE7YIZJjqYC9l:Dhc//////neh5K18pZbY6JjqYC9
Checks for missing Authenticode signature.
resource |
---|
2793b77413e557beef93329e77a234f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ