DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3fb24a9258f91fb49b2396a63a11f1de_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3fb24a9258f91fb49b2396a63a11f1de_JaffaCakes118
Size
610KB
MD5
3fb24a9258f91fb49b2396a63a11f1de
SHA1
20918b44a9165b0ce8af25d9ed01f859a6997824
SHA256
dc73aa877a738882063fdba971908c1c8b815129c6a30d63aeef218f9e3f0463
SHA512
fca47fecd24a9917b0c4beb69be1606ed4c8d7855e86715309ec12a051082d0018bf7bd5ddee875414af1558ea43027f50332dc93c1297d49c52ca4c7b9dbd17
SSDEEP
12288:6AFp96Ffv/aX/tOo0O00w8NJidSCnTLtb78F3l+VBwBSHeIBv7pj:DFv6piXQob009qSCXpoj+UqeIBT
Checks for missing Authenticode signature.
resource |
---|
3fb24a9258f91fb49b2396a63a11f1de_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ