DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
5f083cc70d3e834815fa0e9923cf8796_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f083cc70d3e834815fa0e9923cf8796_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f083cc70d3e834815fa0e9923cf8796_JaffaCakes118
Size
31KB
MD5
5f083cc70d3e834815fa0e9923cf8796
SHA1
89ea4e5a71fb58e91b7ad1ca67a92e6849652064
SHA256
7f322cf4f46180b7509320d7bb240376893ce521a80e0eb42f36a3d1fc5a40ff
SHA512
a02ed479cf6caba2aa17e311d54200d4388cd55d181330b7d5ea6fd70926725cdabd20c064dfb46388276fe2ab3f88638c2d6f2f044e8a2d96a64100889e3034
SSDEEP
384:eNNe06t9hcyL6rnY5vgiT1Gk/OsCa9aEEUB2m+CY2mjGhkBN/FCN8lWH/lQas:6eP9hGsgWGsEUBBYJFrl2tR
Checks for missing Authenticode signature.
resource |
---|
5f083cc70d3e834815fa0e9923cf8796_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ