DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5d1eb81c479b78e29f2dee938b3fcf21_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d1eb81c479b78e29f2dee938b3fcf21_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d1eb81c479b78e29f2dee938b3fcf21_JaffaCakes118
Size
156KB
MD5
5d1eb81c479b78e29f2dee938b3fcf21
SHA1
8f00ca5d0fa6e48b212ae256f7c15909a5a165ea
SHA256
7372a17d24560a2be9aa3321b06cfad4c51480b828d5a7348ffb73da79e35509
SHA512
b341a1b5ccc3f0d5bff4f62b425d4c23215e564c596adfafaf7d7763c63a7716d9a0ad386ebdc4761dd1ebe3cefc3d9f7375e2ab4bcd9478ce0e4b647fb8a3bc
SSDEEP
3072:eIfi6M+xK/py1n/qPsGmTQzY441L+O/4MPR+fNy8grd0rS4D9ZyOtuV5fdfCEjGO:eN6M+xapy1n/qPsGmT0OL+bkR+Vy8grm
Checks for missing Authenticode signature.
resource |
---|
5d1eb81c479b78e29f2dee938b3fcf21_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ