DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
752638b289aeb4eb3fb13e5a2b5deca5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
752638b289aeb4eb3fb13e5a2b5deca5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
752638b289aeb4eb3fb13e5a2b5deca5_JaffaCakes118
Size
159KB
MD5
752638b289aeb4eb3fb13e5a2b5deca5
SHA1
05666847fef04a4bc2c3d2d6b900ced670eab0a6
SHA256
6232e08939c13429cfcdcf9541bcdc6cf0de2345a95bcd6168b0d869f3a0a5a4
SHA512
9d728d241c588cebf97bcc1790f9064db9358b4dd89a15f9087ab9c99e046cd38d57da7267f5639901acca34ba7b2b22ffe30c3b27628b593137b9c8f329ada1
SSDEEP
1536:0Wty3OgQCkZetiXD7M904IzKsWoJ7xwAU:0MWG89PIOsW0
Checks for missing Authenticode signature.
resource |
---|
752638b289aeb4eb3fb13e5a2b5deca5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
LoadLibraryA
ord580
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE