DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
3e75173dbd00a1918cf23f6c458fbad8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3e75173dbd00a1918cf23f6c458fbad8_JaffaCakes118
Size
1.1MB
MD5
3e75173dbd00a1918cf23f6c458fbad8
SHA1
bdfd1828a9a79540cfd922b0a17999f4f13e6f3d
SHA256
a3ae41ab3b118a10cd442e1c8fcc1917e31ca1f99e437bbf7f6e7470608f3a70
SHA512
ac3510502c774e475247ca91b7b19e1b1e81b55837cad866807fadbd508dc3eea066740d083fe016683e8f56a9566b50a969a86be6db25ce89688e15178618d3
SSDEEP
24576:koCc//////Oi6smRMX+06ZcSbv9AixEh83vJnB3v4l:Yc//////Oi6sm2O06yz4b3v4
Checks for missing Authenticode signature.
resource |
---|
3e75173dbd00a1918cf23f6c458fbad8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ