DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_5ca76fa66e2673d7e0e8d7eb04eb4623.dll
Resource
win7-20240903-en
Target
JaffaCakes118_5ca76fa66e2673d7e0e8d7eb04eb4623
Size
644KB
MD5
5ca76fa66e2673d7e0e8d7eb04eb4623
SHA1
2ff3812826ecb6e78ec5a3b4aa6e2a125d1c0433
SHA256
6ef40af417bad766e468541e1e094de80cf25c5966608295c2cb78789f19eeb3
SHA512
1c4d1827803531ffa1c31786f08de5d494fa2d7e1d370b0a4efa2baddcf776915bb9820679ac344591a84498b390ff63fdb4450dda9eed73da7c424096a41d2a
SSDEEP
12288:2viGqB8vFJySCXSs9/NAolnnMATPxhOLgZs3e4I6kMHeIBv7pj:26Gw8Ty3XXplnjlhOLgZs3NHXeIBT
Checks for missing Authenticode signature.
| resource |
|---|
| JaffaCakes118_5ca76fa66e2673d7e0e8d7eb04eb4623 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ