DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2acddcfc003673911bf7c51e36128d35_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2acddcfc003673911bf7c51e36128d35_JaffaCakes118
Size
1.4MB
MD5
2acddcfc003673911bf7c51e36128d35
SHA1
3a3562e6399617fac036a3a597fe9c5e7fe0833f
SHA256
f6f1eb735610fe5d1bf9d0b762a69e8d5f9cb37765c1f59e67dd3dba389d0fa9
SHA512
ce157672ccd0418a7e34e6124b292dee12c523ff0e21241244d48ab783cc4d7ca85d4af81e269eb97ddd7e39426d69e49f6145d58d206defcdd7860d92452ab4
SSDEEP
24576:ZvffBv3htYeD7seUgvCQGWoWoF4NUZ6tc29T38QHixCf4L923zdQHro4VhY:Npv39vsMC1WYF4NUZ6tlsTCHeH0f
Checks for missing Authenticode signature.
resource |
---|
2acddcfc003673911bf7c51e36128d35_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
VirtualAlloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE