DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3b20ac17f370a2240e1dd1df1bc04a41_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3b20ac17f370a2240e1dd1df1bc04a41_JaffaCakes118
Size
442KB
MD5
3b20ac17f370a2240e1dd1df1bc04a41
SHA1
c277414fee160c862b0ac1213e499c7af966cc8e
SHA256
886808aeac3d1512e451647ccbf13b6590016546e365efff9a2f5ce1281d9bb2
SHA512
f130f09f65dbe61c6f134c95a616f3c0f1f0c3fed7995709152ef78eb1409d77c1846020583a749c0321d1b48c18e91861f9d24bed346294606b424698d32105
SSDEEP
6144:nt/5ek5kPx3MC6zcY/eAoAz/D0OYvbOlnONoKHK/v+wwWDRB8WkRU3pOPEPUn/c1:t/5ek5OWC6zce8THKnN4aUn59O
Checks for missing Authenticode signature.
resource |
---|
3b20ac17f370a2240e1dd1df1bc04a41_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ