DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ThreadUpJPGmxd
Static task
static1
Behavioral task
behavioral1
Sample
2b537d0d1310358a9d0a0f2312123a4d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b537d0d1310358a9d0a0f2312123a4d_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b537d0d1310358a9d0a0f2312123a4d_JaffaCakes118
Size
43KB
MD5
2b537d0d1310358a9d0a0f2312123a4d
SHA1
9af000d8992cc2e9fcb233f136e66137a3968221
SHA256
da70bb9a7f8b36f8a54b685348363c995bd82ea42c517ced5dbd5a5c28466c1f
SHA512
4ba4e678abb6c1905251b9017d6e1baa8f9c53370a907ab7450e98110ca4b59b94e9d5cd757fda971f0d09312a1ddab6f3aa8758c3ab7920bfba3de8a9da0df0
SSDEEP
768:xCYqEQ9vUr8QDQLWU6LZQig8paydnBko:YYqEQppaQLHyKig8EuV
Checks for missing Authenticode signature.
resource |
---|
2b537d0d1310358a9d0a0f2312123a4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ThreadUpJPGmxd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ