DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2af75f347985fce4b81228fef52d8f8a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2af75f347985fce4b81228fef52d8f8a_JaffaCakes118
Size
440KB
MD5
2af75f347985fce4b81228fef52d8f8a
SHA1
0110e04f581ed1eb0acbaaecaa1eb7312c5c1d58
SHA256
d7d0e32c1850ee269f5378a5d263e11000fd9a0aacbff1bb4f60ed0fd786c453
SHA512
ae2cf88c9506f526fd5678632295bec72078a0e4ce7124d5a9a8693d0733434a578c179fd359f4f80ee731cf4fff0fdd97ae30870133a5b6e1d0c6b4034fbc77
SSDEEP
6144:G7gKZg1i2qZAK3XSZfYGLHMBmSc/WOYYvf7IMjAr6WquPnBV0syi31112bDjHvLO:G/Ai2qq7ZfYGocBWquPBV0mgDzAh1f/
Checks for missing Authenticode signature.
resource |
---|
2af75f347985fce4b81228fef52d8f8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ