DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
45b605409fa327bfb2c32cf8a3ee1e3d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45b605409fa327bfb2c32cf8a3ee1e3d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45b605409fa327bfb2c32cf8a3ee1e3d_JaffaCakes118
Size
573KB
MD5
45b605409fa327bfb2c32cf8a3ee1e3d
SHA1
d6d8467e7c3c93290ecfe3ae647d0d846a7614c6
SHA256
d1e83a01a9107331e2566a2804740df9653d6611e744840c68a5b60a0cb719d4
SHA512
e46a8935089726c62f46d07e3939b7e6e68e18746b042214a3897394f0d8a13038232c506c5dba304135a40ae9d718c5baf9ee78f6bb0e557ed22b4d860b4aad
SSDEEP
12288:K6Jh406TwZoDrTefpJfR9AVBG+tYcZii3EeqKGEAsFin1:dh4P8yDrWLRqnG+tYodwtEhE
Checks for missing Authenticode signature.
resource |
---|
45b605409fa327bfb2c32cf8a3ee1e3d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE