DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Kjhjkfdsa
Static task
static1
Behavioral task
behavioral1
Sample
0ea195d8bb5e8f75656bf91b9bf952c4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ea195d8bb5e8f75656bf91b9bf952c4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0ea195d8bb5e8f75656bf91b9bf952c4_JaffaCakes118
Size
163KB
MD5
0ea195d8bb5e8f75656bf91b9bf952c4
SHA1
f565c40ec542df1ec52100d6f6027975fde81b27
SHA256
8268023eb015b03f085081f18dbe05e7ea5ecd486068483019469a833e88afa0
SHA512
704c2737ec5b3421e7f6e67cb6858efd88871d4ceef6bcbfa08a30c1ea7d28751a65ba5389f3167eeb93e8148b45ca3a8fc688c8b31dc08e667877688d3c20b7
SSDEEP
3072:2zjynfPiWJTiWJTiWJTiWJTiWJTiWJTiWJTiWJTiWJTiWJ+:IjQXiW9iW9iW9iW9iW9iW9iW9iW9iW9i
Checks for missing Authenticode signature.
resource |
---|
0ea195d8bb5e8f75656bf91b9bf952c4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Kjhjkfdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE