DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0e5b16df349205a67b1dbebb490d1ac7_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e5b16df349205a67b1dbebb490d1ac7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0e5b16df349205a67b1dbebb490d1ac7_JaffaCakes118
Size
156KB
MD5
0e5b16df349205a67b1dbebb490d1ac7
SHA1
44d4ae08b6493d5784bee1b1d541936247088c7a
SHA256
7e0392ea7ad9fab7af0c667f2770f1263aa022d6b14e6ac4859672d5b9a36dae
SHA512
79a91196c7c5c2b87e581a0c35eb38a74a18505dcd706eb2138a3f3240fc36ea42bcf48feaa70b7b0a6f515d4eb7c4b4e9f179dda2e2fade1d96ca6fd0ed0533
SSDEEP
3072:0Ifi6M+yZ4KBQDw3QBpq3ynj6ARCPBr+MDRpu0gP+rpEhpRxAi6:0N6M+yHceQBpq86ARCPJnmr7c
Checks for missing Authenticode signature.
resource |
---|
0e5b16df349205a67b1dbebb490d1ac7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ