DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA
Static task
static1
Behavioral task
behavioral1
Sample
63fed550fda6868d5a976f3d80e5bf94_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63fed550fda6868d5a976f3d80e5bf94_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63fed550fda6868d5a976f3d80e5bf94_JaffaCakes118
Size
30KB
MD5
63fed550fda6868d5a976f3d80e5bf94
SHA1
e15d588efacd62431d61cd3e7ae02d3ed6f55f51
SHA256
2bb8d5ab6b8fa8d2576b6169b613a6528a4b4b8a64230601c10331c1ee1640c5
SHA512
3b2a57ca962c9daeb02b90b20012e3ce8d510baf1c630ceb3f6b6f9510796fc80d4f15104e337244b62f2631afb3f79710ab8b450eb5769f2e2f01f3fc69bb08
SSDEEP
384:6NNe06t9hchQk8pvIYEPkYkhZUdqnfpGZprkdFn/+osQ8WIHDLXE8J+:OeP9hawhCdqnhq2EnWwM8J
Checks for missing Authenticode signature.
resource |
---|
63fed550fda6868d5a976f3d80e5bf94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHJKFDSA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ