DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
290ee9c4c2a82b3a981b95c29bc31104_JaffaCakes118.dll
Resource
win7-20240903-en
Target
290ee9c4c2a82b3a981b95c29bc31104_JaffaCakes118
Size
711KB
MD5
290ee9c4c2a82b3a981b95c29bc31104
SHA1
5ef3b7f97a2cc7b715ff67c69215b0021545337c
SHA256
9e86a017fc8486bd6c42828ec9636c64e9246a68e33602e361be298b35337364
SHA512
5bf8da24d56d153407a49338f3fb7c6829cd134d1e8d519776d2faa7ef229f3ee3e9f99eb15981661595cf83083c9bee27ac11f5f80cf2007eb7afd9b8ab1bbb
SSDEEP
12288:VHCqAM6vj9ASYe9dPSQBN9KtJ6IMLxaoSDVjEty7KfBWiH1RU:ViqTyp3PSQNKP9MLxaoS2ty7Kfk8U
Checks for missing Authenticode signature.
resource |
---|
290ee9c4c2a82b3a981b95c29bc31104_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ