DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7817c0428c2408d63e38aa3d176e736a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7817c0428c2408d63e38aa3d176e736a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7817c0428c2408d63e38aa3d176e736a_JaffaCakes118
Size
702KB
MD5
7817c0428c2408d63e38aa3d176e736a
SHA1
c6c9555f3628889c9657ff254cb5949eed7397ed
SHA256
af1b305c834eac962129888163df1903c2bc314e01a245c42e4dabc589d95bd9
SHA512
17cfb539e907d68e2612e4e97900ef349734d137dddc09d41b77ec0953f6095d4e159d22d2ef22825174ad98f8041be3db59eb3094fa46e8f36c908bac5178c5
SSDEEP
12288:KzEWPHy5V2beMACDfGeDn9vjgCTbXH6yL27Bcm76GX2lH/yff6a:KzEWPHyH6D/Dn1k4Xp4T6GK/yd
Checks for missing Authenticode signature.
resource |
---|
7817c0428c2408d63e38aa3d176e736a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE