DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
56a27bb087c8ffd51061fe3b3b6930e8_JaffaCakes118.dll
Resource
win7-20241010-en
Target
56a27bb087c8ffd51061fe3b3b6930e8_JaffaCakes118
Size
611KB
MD5
56a27bb087c8ffd51061fe3b3b6930e8
SHA1
278c4d597b608d674c70e47dc52d1c1abb9111eb
SHA256
9b58a53645afb46d9c5bebd2234c9e15df3d89c62150ff6a4cfa87a549986d10
SHA512
006c300c5232bfbe2437574d16adb80b45e8dc0bdeacb59369220965831372e5f55113a1ba0c4d4880f70aabe74397bffb707bbade29dd6b82099f8ab99659cd
SSDEEP
12288:zyA1ZdqVfv/6HftOIA3+00wstpSdCi3TLdrviEAhYysSVBwSwfHeIBv7pj:31fqZCHwIr00taCiHR63KSbkeIBT
Checks for missing Authenticode signature.
resource |
---|
56a27bb087c8ffd51061fe3b3b6930e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ