DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5ecc13852633225c671f9d79a5cb60fa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ecc13852633225c671f9d79a5cb60fa_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ecc13852633225c671f9d79a5cb60fa_JaffaCakes118
Size
35KB
MD5
5ecc13852633225c671f9d79a5cb60fa
SHA1
bdc757db45195a5e6c59d7d29c6e742000be2da8
SHA256
0662b8cd793dbe147cce1558b456534b4af15f300d43d6cde47fdac17ee03f4e
SHA512
6dc23615fe4dab046055f8c286a6cf0c73616ccab050aca3948a2b309ae4668ad683c43ef58f17401645bbb1af65a0bdfa5682e58c0f9c73c50fe53e56e6eb0e
SSDEEP
768:LyRqLFQbtcIV0dM9R+Uakn5W7IX10yANu2BqB:+RqLFQbd0WkUak4EX184l
Checks for missing Authenticode signature.
resource |
---|
5ecc13852633225c671f9d79a5cb60fa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ