DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
Static task
static1
Behavioral task
behavioral1
Sample
065e95a4ee079c3e53d4da3c8a00b0d8_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
065e95a4ee079c3e53d4da3c8a00b0d8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
065e95a4ee079c3e53d4da3c8a00b0d8_JaffaCakes118
Size
234KB
MD5
065e95a4ee079c3e53d4da3c8a00b0d8
SHA1
11c38a35a0cb79f87e5ce20e6aa5a641cdd89c3b
SHA256
be338228ffc7ba498accfc851bd31d1d44c1092355ed3f3bae926f5b68904312
SHA512
0ee1af17e84299f96c27faf5514fb7677d6fad5a8ce4af2eb97aa0e0f68541ba9ad3c5646cb265b35d051518840f806003737bece8e1bea2a30ff5fdc8572374
SSDEEP
6144:m5g4WMD5g4WMD5g4WMD5g4WMD5g4WMD5g4WMD5g4WM:L111111
Checks for missing Authenticode signature.
resource |
---|
065e95a4ee079c3e53d4da3c8a00b0d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ