DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2ba6477be8cede6d3b317ba5fd05de75_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2ba6477be8cede6d3b317ba5fd05de75_JaffaCakes118
Size
643KB
MD5
2ba6477be8cede6d3b317ba5fd05de75
SHA1
688ee8fa5cc70bc42baa16c5ca1d2f8abb85acd2
SHA256
bb9dbc7d1140fd9f000ef47e9a6abff07fefd02137a57a702ac3ce4efc7d51ea
SHA512
c214c1e4ee5204cc4821b1892a025e22cd2fde2f45aa6514c3b51fffb895bb22142f69c243793428056ed228f9167a70446e0ccb5e2db6beebb6727234a3e1bf
SSDEEP
12288:SviGqB8vFJySCXSs9/NAolnnMATPxhOLg8s3eFq2kmHeIBv7pj:S6Gw8Ty3XXplnjlhOLg8s3OleIBT
Checks for missing Authenticode signature.
resource |
---|
2ba6477be8cede6d3b317ba5fd05de75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ