DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0a6fbbbe1684cf1fd6c0103751bbc713_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
0a6fbbbe1684cf1fd6c0103751bbc713_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
0a6fbbbe1684cf1fd6c0103751bbc713_JaffaCakes118
Size
191KB
MD5
0a6fbbbe1684cf1fd6c0103751bbc713
SHA1
0040f7ca53e152b6c9262174331f31c8a6c242cf
SHA256
e9c6d82f9bf3d898e04748a00f7c5696ce2aa21d188c4cd1ceb287a2946150aa
SHA512
d18cbddaf7bb8162f4dd1fc67784675f11e60ba3192d8b60a38bc56ddbd70ce6c67c63f4890bd02f5403450cbd819a675135e06143c06823b11ca9bf64bfcfc5
SSDEEP
3072:hMshA4T+I6VIG//CTIxAx+jsLyH714PBJW0ubLeBdVw9+TpFLMHb+FH:7SA+I6VIGSTIxAVyBmO0uAa8z0
Checks for missing Authenticode signature.
resource |
---|
0a6fbbbe1684cf1fd6c0103751bbc713_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ