DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHjkFdsa
Static task
static1
Behavioral task
behavioral1
Sample
890e8778e8b5a01e6dab219a2cb940a9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
890e8778e8b5a01e6dab219a2cb940a9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
890e8778e8b5a01e6dab219a2cb940a9_JaffaCakes118
Size
217KB
MD5
890e8778e8b5a01e6dab219a2cb940a9
SHA1
fc5049a616eac939c5f4fade0ecf2f0bb4692b75
SHA256
8e71e4be090ed845290be170d186e2cf76290e2db42739e63beb77c1bf0be2a7
SHA512
141c50bfbc664534af352fe4d544eed238ade0fa69fa9db36198039f4e4268d3d8032f77b78df68a3f0d96ac50dd314787fea02be8642ed75cc40758342ceb40
SSDEEP
3072:ojDn1KjDn1KjDn1KjDn1KjDn1KjDn1KjDn1:ojDnkjDnkjDnkjDnkjDnkjDnkjDn
Checks for missing Authenticode signature.
resource |
---|
890e8778e8b5a01e6dab219a2cb940a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
KJHjkFdsa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ