DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KjhjkFdsa
Static task
static1
Behavioral task
behavioral1
Sample
246b6486a48eb1bc28908a675c9e6aba_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
246b6486a48eb1bc28908a675c9e6aba_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
246b6486a48eb1bc28908a675c9e6aba_JaffaCakes118
Size
158KB
MD5
246b6486a48eb1bc28908a675c9e6aba
SHA1
fafe1ebfd9304884e05a672e5511ee8ec6b382c1
SHA256
adc8e8a8736ac033114ac163e990e0c0c44cd4a56f85109e4538004a57cc0a96
SHA512
5e68cd627e9898cbc77a0503700c0be2ac0b4ddf16f54808c2d3be7628b20606d8494459a8d5f8a1967bb3b18162b93f4b704b68b03a07d4f5be806583b3e795
SSDEEP
3072:EFUjtVytGBUEAmGBUEAmGBUEAmGBUEAmGBUEAmGBUEAmGBUEAmGBUEAmGBUEAmGe:LOtGRlGRlGRlGRlGRlGRlGRlGRlGRlGe
Checks for missing Authenticode signature.
resource |
---|
246b6486a48eb1bc28908a675c9e6aba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KjhjkFdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE