DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3c9266470bc592b2924081b34a5233c2_JaffaCakes118.dll
Resource
win7-20240729-en
Target
3c9266470bc592b2924081b34a5233c2_JaffaCakes118
Size
557KB
MD5
3c9266470bc592b2924081b34a5233c2
SHA1
1f352ccab1462dccd50bdc12fccc0fd0fdb6ec31
SHA256
25e4eb589e97d6e209463b373949a490d2237e4f5a521aabaaadee5e4754a3c4
SHA512
cced2fa399eee1e346de5db1d62a9155a53538d1b315dc4457c7343fd33e578dc4702d5a79832e29f47ee3245ad2c558d4a32ea8eb302a2eb6feedad5df18493
SSDEEP
12288:Ib5Dz7aR60+ax1JTIGSbslhP8aqoXCyw0pncg2K:IlD3a1+apTIGSbAhrSyDpnZn
Checks for missing Authenticode signature.
resource |
---|
3c9266470bc592b2924081b34a5233c2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE