DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHjkFdsa
Static task
static1
Behavioral task
behavioral1
Sample
2f58983ebe3987f55457e9c32b6a02f3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f58983ebe3987f55457e9c32b6a02f3_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2f58983ebe3987f55457e9c32b6a02f3_JaffaCakes118
Size
206KB
MD5
2f58983ebe3987f55457e9c32b6a02f3
SHA1
e4914fe1c66809f4ce0ab23620348c9235a81cea
SHA256
9dd995e2c6eee4ffc8e103d41f1dde28a524b02f3713709a756a25226e2ed7ed
SHA512
548b21fc91e549a37a3371dcc95e054284e6276ed9ed948aec97475da42be845517256eeb149f3a9c405e8c4f09f50e52623e0fc54bd9570e86b555ee1fab8a7
SSDEEP
3072:BM9cclS7M9cclS7M9cclS7M9cclS7M9cclS7M9cclS7M9cclS:y9ccV9ccV9ccV9ccV9ccV9ccV9cc
Checks for missing Authenticode signature.
resource |
---|
2f58983ebe3987f55457e9c32b6a02f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHjkFdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ