DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2d7790553237da5b3439bf87c5b634e6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2d7790553237da5b3439bf87c5b634e6_JaffaCakes118
Size
606KB
MD5
2d7790553237da5b3439bf87c5b634e6
SHA1
d8b37ace1c0d741400bc40ec5c0d4944d28318ac
SHA256
bc08c2885fc20a5f0cdf7d9a6232e0e95af4b0590610ce4a6f94b862b1f70c4d
SHA512
7eb6461fbc7ebd2eb82d6541a0d708d5421844c5aa265937e707fb1cb57fb5501ff9f0b0782335b8a67e2bb4aa3242de39356c9390e73fae3221798bf7d94b9c
SSDEEP
12288:HdUXYC8MJH4nrGPP6oH/srAvNObzyhLPH2aylsfZ8srTOfm0f:HmoCHJnnDHJvszyh6DYaEOfL
Checks for missing Authenticode signature.
resource |
---|
2d7790553237da5b3439bf87c5b634e6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ