DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
f5a65dc6aaa81c1ca4604adcde4baeb8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5a65dc6aaa81c1ca4604adcde4baeb8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f5a65dc6aaa81c1ca4604adcde4baeb8_JaffaCakes118
Size
213KB
MD5
f5a65dc6aaa81c1ca4604adcde4baeb8
SHA1
86e8831874131931bebe6b8891829ea87c6d8c59
SHA256
e5f8ca6b8483ee5f944680d8cb00d8514b27a23020ec8dc13fc1ae104f68b378
SHA512
c90fe7ce906a5eeed58c54b4d7e8edc6489b6ade0a92b1231e8c16cd69b45e70a9c6189f82773bc327adfffa6163711e865fd0b564bbc41a79a798e8f6799b69
SSDEEP
1536:KkfGnz6axBPukfGnz6axBPukfGnz6axBPukfGnz6axBPukfGnz6axBPukfGnz6aQ:sz6aAz6aAz6aAz6aAz6aAz6aAz6a
Checks for missing Authenticode signature.
resource |
---|
f5a65dc6aaa81c1ca4604adcde4baeb8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ