DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
04ea0e325cfc2bf8e5a89643c53c8580_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04ea0e325cfc2bf8e5a89643c53c8580_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
04ea0e325cfc2bf8e5a89643c53c8580_JaffaCakes118
Size
32KB
MD5
04ea0e325cfc2bf8e5a89643c53c8580
SHA1
062b58e859ad76ce685ac14b4d182f3b69296115
SHA256
e9bc7fbfdc0709e290a446e99f836915efd2e66731b8635760f674f07b2717a9
SHA512
c6898689baca95c168c3450b665f8d3d051df4540171587db11935824ba0e0f5417bb1bb173dc2e430e93eb48686e246ac4d9793867d211e6bb63d638d622109
SSDEEP
768:C+v9hriq1i/IbANNgb3f84QXQ40rt4pfwQiAl/:CE/rcqZxfAl/
Checks for missing Authenticode signature.
resource |
---|
04ea0e325cfc2bf8e5a89643c53c8580_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ