DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
Static task
static1
Behavioral task
behavioral1
Sample
b102e3eee5bc0ecdc37b5f73d20b66f5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b102e3eee5bc0ecdc37b5f73d20b66f5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b102e3eee5bc0ecdc37b5f73d20b66f5_JaffaCakes118
Size
227KB
MD5
b102e3eee5bc0ecdc37b5f73d20b66f5
SHA1
d2f49ce0bc3db3c50f22c62db6d7f1d399d10f18
SHA256
6fe586688aa48b6b8b9fb8eb433807217f71a00ede143565c31ba8b372938797
SHA512
df442a1274bd0cc28fe2f8e75fb70e4dbbb6ca79c158b0c6b31f5271d52736a55f832717a5d32e03ae651eaa6222a8a239938c9d2a7f8deb329c69ee95cb21c3
SSDEEP
6144:5OnpwDDVOnpwDDVOnpwDDVOnpwDDVOnpwDDVOnpwDDVOnpwDD:5OnqOnqOnqOnqOnqOnqOn
Checks for missing Authenticode signature.
resource |
---|
b102e3eee5bc0ecdc37b5f73d20b66f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
hkjdf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ