DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
Static task
static1
Behavioral task
behavioral1
Sample
0f6bea848cba390e3d1ae1d7fcf8f3a4_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f6bea848cba390e3d1ae1d7fcf8f3a4_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0f6bea848cba390e3d1ae1d7fcf8f3a4_JaffaCakes118
Size
32KB
MD5
0f6bea848cba390e3d1ae1d7fcf8f3a4
SHA1
86fdfda53f585e3b2e25428c77ec2626e331cdc3
SHA256
aeaea89c463b49779c3069ac78ee2ad9b0345328af4b4df36ed2f9d09017ec6f
SHA512
6037f67e26fc300c436e71f6951e4bf9455c5768f37d0417a7e416475f6f07457868b26cdcd6fb5a591a5a2cc3f91edd299b4e070b65e277734184f67d998245
SSDEEP
384:QNNe06t9hclnZFRuSNyXKG4wdTATxO2g7Tv6iEngATLQNYh68UWH3+YfD/Ck:oeP9hoN7+dUTxng7+ixAwN0NU23HD/9
Checks for missing Authenticode signature.
resource |
---|
0f6bea848cba390e3d1ae1d7fcf8f3a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ