DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
Static task
static1
Behavioral task
behavioral1
Sample
f413f51cf0b36ba260cc0d5b5cef970d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f413f51cf0b36ba260cc0d5b5cef970d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f413f51cf0b36ba260cc0d5b5cef970d_JaffaCakes118
Size
213KB
MD5
f413f51cf0b36ba260cc0d5b5cef970d
SHA1
51fb1eaa90b7b05cf95a856f34702ead799c1e64
SHA256
d354cb9cc5c6d3c0a0ef2aeb39a2dc0b4867d4096dc2509644ec4703f3a13ffc
SHA512
7ffbf2df5ba4bac3754c571c562bd5bcd9e9a86d5e2ba303026999ff0eb5e34f6dd7aa6ee8d586d9e8222fb4bb214e2b4335eb7a7d826e833863f382f30f0b51
SSDEEP
3072:WHb2HnHb2HnHb2HnHb2HnHb2HnHb2HnHb2H:yaHHaHHaHHaHHaHHaHHaH
Checks for missing Authenticode signature.
resource |
---|
f413f51cf0b36ba260cc0d5b5cef970d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
derdae
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ