DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
41d68a29d21cb23240235c0281ac3248_JaffaCakes118.dll
Resource
win7-20240903-en
Target
41d68a29d21cb23240235c0281ac3248_JaffaCakes118
Size
712KB
MD5
41d68a29d21cb23240235c0281ac3248
SHA1
3b9d2279090a534ab21ec6f21596fcdca3ef0b78
SHA256
a9d1e4cf27af4990be595ab1b597eb36e17888a6f8fdce93b7b68210e6f29a08
SHA512
106a03ed090c00fbbd37ca6d86adcb1c91dbb5823241472a93ae882ab6f28cb1df7e8be5a31c66cc05555d007d3ac62f929b03798da2689e4c816ea5b6517c7e
SSDEEP
12288:GHCqAM6vj9ASYe9dPSQBN9KtJ6IMLxaoSDVjEty7CweDSiH1RU:GiqTyp3PSQNKP9MLxaoS2ty71eu8U
Checks for missing Authenticode signature.
resource |
---|
41d68a29d21cb23240235c0281ac3248_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ