DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
5d079c51873d4658f12d701494e96a46_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d079c51873d4658f12d701494e96a46_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d079c51873d4658f12d701494e96a46_JaffaCakes118
Size
210KB
MD5
5d079c51873d4658f12d701494e96a46
SHA1
e0379daf931ef185fa89bfa0c30b9359c37675f8
SHA256
9ccd929a0b3ba57e8303311ecb9ea9a01dc38eee6ac123817155d022d955dfa8
SHA512
a93ad69170538c8e0069d5336d587546f013a46c6d7c72dd5633603c7198d133604e5b1dbbf83addf647f21a109f198b66f2fa3943b1994f0c7cd1f9ed7fed00
SSDEEP
3072:2baHZdbaHZdbaHZdbaHZdbaHZdbaHZdbaHZ:oaH3aH3aH3aH3aH3aH3aH
Checks for missing Authenticode signature.
resource |
---|
5d079c51873d4658f12d701494e96a46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ