DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
534416c1c24cbfed407563654a61e68f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
534416c1c24cbfed407563654a61e68f_JaffaCakes118
Size
565KB
MD5
534416c1c24cbfed407563654a61e68f
SHA1
9771b70cdf5fbaf94d3e51383f9eb62813c3e496
SHA256
b45a5f8de0c88718c93c3e16c2663272df69600fe7b97bb62e11ccf77dc36cc6
SHA512
be6045a17bdf5ae1161aec2f5fbf6b763ce53a571c74f806e671037df4a7ea408f5e636b0558b7793c268fdd7e7c891eebc41265f1cdced0d54016c6b5e1814c
SSDEEP
12288:uAFp96Ffv/aX/tOo0O00w8NJidSCnTLtPOLe9ZVBwFHI:HFv6piXQob009qSCXpOWZcH
Checks for missing Authenticode signature.
resource |
---|
534416c1c24cbfed407563654a61e68f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ