DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa
Static task
static1
Behavioral task
behavioral1
Sample
0a5050d4c7961f3b7a8b1674e0de1175_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a5050d4c7961f3b7a8b1674e0de1175_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a5050d4c7961f3b7a8b1674e0de1175_JaffaCakes118
Size
155KB
MD5
0a5050d4c7961f3b7a8b1674e0de1175
SHA1
14b3fa933f5b71e4ada77f4a1f62fee7fb505128
SHA256
abc1f079b15de9007a9a256bbb6b699f4d496a748269a68ea9b9a8c145b9680e
SHA512
23b04d1b9aa964ba3520b98dff0340205cf094f2f917c67f669cf1050f0bb423606af2a7ea2ba027e4eda71bc92cdde8879433f966306d984182440c9061423b
SSDEEP
3072:5u15eIgp/faVj7gp/faVj7gp/faVj7gp/faVj7gp/faVj7gp/faVj7gp/faVj7gH:5sPgp3ugp3ugp3ugp3ugp3ugp3ugp3ue
Checks for missing Authenticode signature.
resource |
---|
0a5050d4c7961f3b7a8b1674e0de1175_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJhjkFdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE