DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
Static task
static1
Behavioral task
behavioral1
Sample
81d07cdf45941f9f68e8274d00866a94_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81d07cdf45941f9f68e8274d00866a94_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
81d07cdf45941f9f68e8274d00866a94_JaffaCakes118
Size
36KB
MD5
81d07cdf45941f9f68e8274d00866a94
SHA1
72c5df8b746c1d9adccb11050a4c62c5c281b39a
SHA256
870b06602c174bd6d669baa0e97ddd9532a530d4e15bc6471913f2d5feecb586
SHA512
e92a421dd49954aca88b36b2f5a8920bcf4691263f320a11f9e15ee2ba53fd7a64912516434669b612e54737cd4971667c210b0dbcbc60d312819b5b2e389094
SSDEEP
768:dJX0fiiEXeISQeFR4LNF9gIwLSw+aBWjK:d50KkajL7MLSZjK
Checks for missing Authenticode signature.
resource |
---|
81d07cdf45941f9f68e8274d00866a94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ