DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
Static task
static1
Behavioral task
behavioral1
Sample
ff59e353c6d2224fcac614c97e59b197_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff59e353c6d2224fcac614c97e59b197_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ff59e353c6d2224fcac614c97e59b197_JaffaCakes118
Size
32KB
MD5
ff59e353c6d2224fcac614c97e59b197
SHA1
22e6a38772e13a25c652f541a6c471421d5dd8aa
SHA256
3bd612a76d110f69a8d2949685dde87f2924d3249c3a2c69155e0b1150ae1454
SHA512
33b11bf982b26c9c3bf25580ce088cde4c7e5136a193fffa62682d4da778f551fff49e3b57d8d52032ac5efceff9517279c65476e0465d4df64cac0cc1283983
SSDEEP
384:yNNe06t9hclXX0ikpXYbNDgp+gaIwCQo10sad9vGS3iHrtCz18UWHi5k:meP9h4XxpJga1lg0sadJGSgrtCSU2Z
Checks for missing Authenticode signature.
resource |
---|
ff59e353c6d2224fcac614c97e59b197_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ