DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
2a7850a6e3bb96e0acf583d9579f7165_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a7850a6e3bb96e0acf583d9579f7165_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2a7850a6e3bb96e0acf583d9579f7165_JaffaCakes118
Size
713KB
MD5
2a7850a6e3bb96e0acf583d9579f7165
SHA1
00c453a8805d572f24a7acce3d3e9f2eca8a90e4
SHA256
6cd3478a9e60287b17b2832b44261fb22556c15176252f6e5231d5f60a2b717e
SHA512
f5809866ffc83aaec87fafd3157eae6edaf5ed2a542eecedd71602ba4d30c29788dca697be3f0820f95dca1d773fa48955d84dd11a20ac872a97e9b965562ad8
SSDEEP
12288:/cvNPaLT383OqPxmKaOqLe0j6HIWRVC0GcbZ84yjraIhoXR:ktawOqPxmKPqLz4cst8bPHh
Checks for missing Authenticode signature.
resource |
---|
2a7850a6e3bb96e0acf583d9579f7165_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ