DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
Static task
static1
Behavioral task
behavioral1
Sample
394e87753bc373ce40b4a8f7cdaf2777_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
394e87753bc373ce40b4a8f7cdaf2777_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
394e87753bc373ce40b4a8f7cdaf2777_JaffaCakes118
Size
119KB
MD5
394e87753bc373ce40b4a8f7cdaf2777
SHA1
ccf85543d924dff7a120d8a4697ba35d766f171e
SHA256
7fc236bcab9a21b3a3cb94b5d33eb3f3b250c1892d90799b3fd533c78fb4b023
SHA512
bb700b8550c01ded8734bdfb8362f8c789ac7e5b63850b7bb946308e311bd52ad3bfaa6b26bc2f30502e48a1917343cfb3914a43a6d075b2e364b89af9e68b56
SSDEEP
3072:uY4JUnzP7YZ+AXtVbxdFoW1RuMMLi1xAEkZFGeAv4Z7:iWnzP7ixXtp9oLiMEkZFVz
Checks for missing Authenticode signature.
resource |
---|
394e87753bc373ce40b4a8f7cdaf2777_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Entry0
InitEn0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ