DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
0878b09dd34adcff13e8862aab39b0b3_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0878b09dd34adcff13e8862aab39b0b3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0878b09dd34adcff13e8862aab39b0b3_JaffaCakes118
Size
29KB
MD5
0878b09dd34adcff13e8862aab39b0b3
SHA1
a949153378cd5a31641780612313d1a732c36889
SHA256
bf25f67da61fff849f77af4f0804e6690ee1aeedc60a6d2c003c585a5f74e47b
SHA512
ac4feace1cac6bbcc7e779c659600c3590f4c4bcaced0c83a4058f0b1e0cf0716480b649d392758231288e0e4a263ba348fdcd55eb3b93f5bbb29569755efcb7
SSDEEP
384:aNNe06t9hcf3LDbJ+lZ1xzY1+xXUoMP90qGAwslR7c19yq48WIHPEHq+aK9y:ueP9h2NH1+2p9V8fWwPEHLP9
Checks for missing Authenticode signature.
resource |
---|
0878b09dd34adcff13e8862aab39b0b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ