DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3aa9e0a62d9802162315b0c505205c83_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3aa9e0a62d9802162315b0c505205c83_JaffaCakes118
Size
1.7MB
MD5
3aa9e0a62d9802162315b0c505205c83
SHA1
d30d7bf541f58b77f154ac75f5d7529adfc86361
SHA256
6c9e9eb05f408a1f5b94845bfb6fd8fe3cd45a8ea60a1122bdefa29f9f44deb4
SHA512
ce65d7c5c34e85b721ff91adfda8031b8f4164751527ca55fb1f2699a0ce2385585f98a97409e80958550515a646592895d5dcabca64b5954774432d44e0ff84
SSDEEP
24576:TPwlyoP1osD3Xzr8FPoY0f78jb0M1ZD0mlZ:TIvDTo0f783D1ZDhlZ
Checks for missing Authenticode signature.
resource |
---|
3aa9e0a62d9802162315b0c505205c83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ