DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Shutdown
StartShell
Static task
static1
Behavioral task
behavioral1
Sample
309b5ed9aca435db73885e8b20bf67c8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
309b5ed9aca435db73885e8b20bf67c8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
309b5ed9aca435db73885e8b20bf67c8_JaffaCakes118
Size
15KB
MD5
309b5ed9aca435db73885e8b20bf67c8
SHA1
678685f5c57275b01970a8164ed2c1e9ad3a6f1f
SHA256
833048e70ac650c5305a218b4780f27d7b97fef3e54be02b45fa02f00be63bc6
SHA512
e9a7f18b81cca3ff92fca90ca1c485503f348eb6b12355ea6352dbc61eee8d821191e2b547089e49c387564e090109e75735d0ae5a78226d6cdf386d18274b44
SSDEEP
384:hRFWbKhvNDXUgCzPG48BMFKDDjL3NbcwDn5zMvu2:wGv+gY+fDj/Dn5zC
Checks for missing Authenticode signature.
resource |
---|
309b5ed9aca435db73885e8b20bf67c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Shutdown
StartShell
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE