DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
Static task
static1
Behavioral task
behavioral1
Sample
af72ebcb5c386421a6d90699f7f68849_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
af72ebcb5c386421a6d90699f7f68849_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af72ebcb5c386421a6d90699f7f68849_JaffaCakes118
Size
217KB
MD5
af72ebcb5c386421a6d90699f7f68849
SHA1
0610ab6c92f1f9007e1f670a9d6140507a345baa
SHA256
7aca1af4e2b298093f8fefbaa3a4d644a5779c09ec5ad90568d17c7a6042a696
SHA512
8bbbe052f31342a91545a72d6780350a40cd46781dc4331e4e66af1122850916ea2e65b0dc5f0f435c8c59c3d9291e767ecd3dae8822c6fe4bb131d12bff0d28
SSDEEP
3072:HV9V1GYV9V1GYV9V1GYV9V1GYV9V1GYV9V1GYV9V1G:19Vp9Vp9Vp9Vp9Vp9Vp9V
Checks for missing Authenticode signature.
resource |
---|
af72ebcb5c386421a6d90699f7f68849_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
sdfrrg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ