DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KjhjkFdsa
Static task
static1
Behavioral task
behavioral1
Sample
32d12077563e84e5f7ef59d1a6ce4161_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32d12077563e84e5f7ef59d1a6ce4161_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32d12077563e84e5f7ef59d1a6ce4161_JaffaCakes118
Size
160KB
MD5
32d12077563e84e5f7ef59d1a6ce4161
SHA1
9063378d326c12a2429701a97ec43e8c726044de
SHA256
f252985c666900f69640457a392ddde7097a72d2da1c394bd3a7c868bcfe9d45
SHA512
87783610fa59201cb4a8eedca94f7864fe0c5667a0f8313220b83e78bbc26045f024b890dd4dd23660a18c2b294a73c216a632b32a90720626309b8cf72ffac2
SSDEEP
3072:JTiyLaPdZZYjrn2bPdZZYjrn2bPdZZYjrn2bPdZZYjrn2bPdZZYjrn2bPdZZYjrB:hJ+Pejr2bPejr2bPejr2bPejr2bPejrv
Checks for missing Authenticode signature.
resource |
---|
32d12077563e84e5f7ef59d1a6ce4161_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KjhjkFdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE