DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
52ef9ac495ce4286e4f793456d516c37_JaffaCakes118.dll
Resource
win7-20240903-en
Target
52ef9ac495ce4286e4f793456d516c37_JaffaCakes118
Size
561KB
MD5
52ef9ac495ce4286e4f793456d516c37
SHA1
e728576ddb485849effb9ac08853a571138a579a
SHA256
76e3b554a3c349861d242c3d4c8a019b0a0a8eb4eb89216a9b732ab4ea03eb52
SHA512
dd96c9d1555dbaa52793dd298f8a6b9e975d84346e07a4341d0f0d0f8098c9a7ee82c9257efddf1190b0b35f7347c239d6ea093c529b1254ef75854da71aa723
SSDEEP
12288:cgUV94y09yxH1az44i2JiU5VVNIUOZH5by2dd3EuZDFk:QVGy0E04wskIZHMEdEcp
Checks for missing Authenticode signature.
resource |
---|
52ef9ac495ce4286e4f793456d516c37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ