DllCanUnloadNow
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
b0ea6c73bc113e38364feb01f04a08b8_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b0ea6c73bc113e38364feb01f04a08b8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b0ea6c73bc113e38364feb01f04a08b8_JaffaCakes118
Size
119KB
MD5
b0ea6c73bc113e38364feb01f04a08b8
SHA1
ac19937c93c7c30b940e719fd0e6a2f488a5efd7
SHA256
0facd04106dd821f02e2c43fcde7dd5dc451dc38a43180e96e42d13ef01d4c8e
SHA512
fef7a80c474e1d81ff9e00bc9d7f32b612d1a01e6e2d652d5e997bd72157e50a722e6355e5db70a4a4e47be30207c2e69563529734476761fc6ca675d8954dcf
SSDEEP
3072:WbVQAq1oUZ5+yEvXKnJKFLRsQGW9NVXYuvPJSuG:WbO1bZwlZLbzVIGPMuG
Checks for missing Authenticode signature.
resource |
---|
b0ea6c73bc113e38364feb01f04a08b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ