DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn
Static task
static1
Behavioral task
behavioral1
Sample
64c504b4e8d660f88a3a105fe737b2f3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64c504b4e8d660f88a3a105fe737b2f3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64c504b4e8d660f88a3a105fe737b2f3_JaffaCakes118
Size
79KB
MD5
64c504b4e8d660f88a3a105fe737b2f3
SHA1
aa9c787884603cb2ef012bc677d823fb75071591
SHA256
b1004f1508d65487fe69b9881bbda719fc2a357d55d64c3c792ef371da5220f7
SHA512
2e4ff8257a403794842e551cc170aab366e5ecee45f4dd778099c743dae8f38c1df50cb0c1fcf1e2d0f229a97f25149c3d5cf99878e90125eadc8100f871d632
SSDEEP
1536:FkmUwQygEVefSsOraXv0NZGJJuK5agFZDBKgNBduzjpFG50v1e4Xn:umRQfEV+SsmNZ6Ju7OZDBKgfduzjpFGw
Checks for missing Authenticode signature.
resource |
---|
64c504b4e8d660f88a3a105fe737b2f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JSOff
JSOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE