DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
Static task
static1
Behavioral task
behavioral1
Sample
17998b7d64d731269b49f61b706fd656_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17998b7d64d731269b49f61b706fd656_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17998b7d64d731269b49f61b706fd656_JaffaCakes118
Size
32KB
MD5
17998b7d64d731269b49f61b706fd656
SHA1
56ab36ca9d9b4f02b8885e2e2809bf371ce0db6c
SHA256
3866e364ce538130aa0b38a80b6f125299ec54931f386e2a84fc9b8d3844fc40
SHA512
5951fe051a65c8715288cf256236e59bb07e8da9594ed99f3ac29f55657c926c680332ad239d0f4512f4fad8732bfba8140c1a10f0a5e49219081d63eaaf8696
SSDEEP
384:l59+PbhI7kZp9Lo//wLwIRghOpiUXboKbb1uQmINZOIQw0KWwuDIxD8sIHjRk:d+ThI7GiaqEXbZ/0mYM0KWRMxYswj+
Checks for missing Authenticode signature.
resource |
---|
17998b7d64d731269b49f61b706fd656_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ