DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
Static task
static1
Behavioral task
behavioral1
Sample
38d8e6169e78be51661c516ec6eed335_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38d8e6169e78be51661c516ec6eed335_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38d8e6169e78be51661c516ec6eed335_JaffaCakes118
Size
118KB
MD5
38d8e6169e78be51661c516ec6eed335
SHA1
be6c9690f91ae5185b57c05c493f08272430291d
SHA256
45209d4072ba7210434e70b165a1c26bfa5bada01a8748b4871894eb8a14ad3d
SHA512
797bfddcb3d884c03622324492fe431f4debd516f164350f86000cc07026d1ce4e8eddadee6956d4509796aafca41da0d4aa52cb2476b70aea5350e23d73512f
SSDEEP
1536:DDq0K3JUnxeMwo8PilfUUzGtec1Kgz+coZ64ZrClj3dpqGhIAR60Ab18pF168L:94JUneoYMw54gzdxLLyYab6n68L
Checks for missing Authenticode signature.
resource |
---|
38d8e6169e78be51661c516ec6eed335_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ