DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
xftwtr
Static task
static1
Behavioral task
behavioral1
Sample
19ab224f8a75cee235f2be6afbefa27d_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
19ab224f8a75cee235f2be6afbefa27d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19ab224f8a75cee235f2be6afbefa27d_JaffaCakes118
Size
36KB
MD5
19ab224f8a75cee235f2be6afbefa27d
SHA1
68f6f28023ca466c4af5ab2eeed7be7f999a779f
SHA256
7da491d11df5a39be51f067106a8ee96c544e5b7fa62c66e980d3bcfa8e397bc
SHA512
bb7e230d59d331a674174ac229d0ba223487891c216ee34415b119a304c6addf82775b20799a13e167a3412b16ceca8b5d15d819b25c1bd117797dc3a7f1d739
SSDEEP
384:gd+k6d9hJykal3i6oSR+wo0bv9OAEm4lJ5h87sh4EqxXC+bFwSMOMTml4zIY8WIU:q+v9hXax7S3P7BilC+xpMsPWwv8
Checks for missing Authenticode signature.
resource |
---|
19ab224f8a75cee235f2be6afbefa27d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
xftwtr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ